ShaheerKhawaja/productionos-qa
codex-skills/productionos-qa/SKILL.md
Systematic QA testing with health scoring — tests web app, finds bugs, fixes them iteratively. Regression mode for re-testing known issues.
$ install --global
skillsauthnpx skillsauth add ShaheerKhawaja/ProductionOS productionos-qaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 2:11 AM39.3s1 file scanned
SKILL.md
- name:
- productionos-qa
- description:
- Systematic QA testing with health scoring — tests web app, finds bugs, fixes them iteratively. Regression mode for re-testing known issues.
- argument-hint:
- [url, mode, or repo path]
productionos-qa
Use this alias when you want the same workflow through a top-level Codex-safe name without the productionos: namespace.
Overview
Use this as the Codex-first QA workflow for web applications and user flows. It should discover the app surface, test the critical paths, identify failures, optionally fix them, and then re-test to confirm the health score improved.
Source references:
.claude/commands/qa.mdagents/browser-controller.mdagents/ux-auditor.mdagents/self-evaluator.md
Inputs
url: target app URL or local dev servermode:full,regression, orsmokefix:onoroff
Codex Workflow
- Discover the app entrypoint.
- detect local dev server or use the provided URL
- Run smoke coverage first.
- home
- auth
- dashboard or main flow
- settings
- key forms
- Expand to deeper QA if requested.
- route coverage
- interaction edge cases
- accessibility and responsive checks
- If
fix=on, make only minimal, verified fixes. - Re-test and report a health score with bug counts.
Expected Output
- pages tested
- bugs found and fixed
- health score
- remaining regressions or risks
Guardrails
- do not invent app state that you did not actually verify
- if browser automation is unavailable, say so and fall back to report-only static analysis
- re-test every claimed fix
Related Skills
ShaheerKhawaja/writing-plans
tools
VerifiedTrustedCommunity
Implementation planning workflow that turns approved ideas into dependency-aware execution plans.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/wiki-rag
development
VerifiedTrustedCommunity
Local RAG and Graph RAG over the SecondBrain wiki vault. Progressive context loading (hot cache -> index -> domain -> entity). Graph traversal via wikilink resolution. Use when agents need cross-project context, when answering questions that span multiple domains, or when building context for planning tasks. Triggers on: "wiki context", "cross-project context", "what do we know about", "check the wiki", "graph context", "/wiki-rag".
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/ux-genie
devops
VerifiedTrustedCommunity
UX improvement pipeline — creates user stories from UI guidelines, maps user journeys, identifies friction, dispatches fix agents. The user-experience equivalent of /production-upgrade.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/tdd
development
VerifiedTrustedCommunity
Test-driven development workflow that writes failing tests first, implements minimally, and refactors safely.
7SKILL.mdUpdated Apr 23, 2026