ShaheerKhawaja/productionos-qa-only
codex-skills/productionos-qa-only/SKILL.md
Report-only QA testing — produces structured report with health score, screenshots, and repro steps. No fixes applied.
$ install --global
skillsauthnpx skillsauth add ShaheerKhawaja/ProductionOS productionos-qa-onlyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 2:11 AM40.1s1 file scanned
SKILL.md
- name:
- productionos-qa-only
- description:
- Report-only QA testing — produces structured report with health score, screenshots, and repro steps. No fixes applied.
- argument-hint:
- [repo path, target, or task context]
productionos-qa-only
Use this alias when you want the same workflow through a top-level Codex-safe name without the productionos: namespace.
Overview
This is the Codex-native workflow wrapper for .claude/commands/qa-only.md.
Use it when the user wants this exact ProductionOS workflow, not just the umbrella productionos router.
Source of Truth
- Read the source command spec at .claude/commands/qa-only.md.
- Use CODEX-PARITY-HANDOFF.md to confirm runtime support and parity expectations.
- Preserve the source workflow's guardrails, scope, artifacts, and verification intent.
- Translate Claude-only slash-command and hook semantics into Codex-native execution instead of copying them literally.
Codex Behavior
- Summary: Report-only QA testing — produces structured report with health score, screenshots, and repro steps. No fixes applied.
- Use the source command as the behavioral spec, then execute the same intent with Codex-native tools and constraints.
Inputs
url— URL to test Optional.mode— Mode: full | smoke (default: full) Default:fullOptional.
Execution Outline
- Preamble
Agents And Assets
- Agents: no explicit agent references in the source command.
- Templates:
PREAMBLE.md,SELF-EVAL-PROTOCOL.md - Artifacts:
.productionos/QA-ONLY-{timestamp}.md
Workflow
- Load only the agents, templates, prompts, and docs referenced by the source command.
- Execute the workflow intent with Codex-native tools.
- If the source command implies parallel agent work, only delegate when the user explicitly wants that overhead.
- Verify with the smallest relevant checks before concluding.
- Summarize what changed, what was verified, and what still needs human approval.
Guardrails
- Do not claim that Claude-only marketplace, hook, or slash-command behavior runs directly in Codex.
- Keep the scope faithful to the source command rather than broadening into a generic repo audit.
- Prefer concrete outputs and validation over describing the workflow abstractly.
- Preserve the scope and stop conditions from the source command rather than broadening into a generic repo audit.
Related Skills
ShaheerKhawaja/writing-plans
tools
VerifiedTrustedCommunity
Implementation planning workflow that turns approved ideas into dependency-aware execution plans.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/wiki-rag
development
VerifiedTrustedCommunity
Local RAG and Graph RAG over the SecondBrain wiki vault. Progressive context loading (hot cache -> index -> domain -> entity). Graph traversal via wikilink resolution. Use when agents need cross-project context, when answering questions that span multiple domains, or when building context for planning tasks. Triggers on: "wiki context", "cross-project context", "what do we know about", "check the wiki", "graph context", "/wiki-rag".
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/ux-genie
devops
VerifiedTrustedCommunity
UX improvement pipeline — creates user stories from UI guidelines, maps user journeys, identifies friction, dispatches fix agents. The user-experience equivalent of /production-upgrade.
7SKILL.mdUpdated Apr 23, 2026
ShaheerKhawaja/tdd
development
VerifiedTrustedCommunity
Test-driven development workflow that writes failing tests first, implements minimally, and refactors safely.
7SKILL.mdUpdated Apr 23, 2026