qmu/select-scan-agents
plugins/standards/skills/select-scan-agents/SKILL.md
Select scanner agents based on scan mode and branch changes.
$ install --global
skillsauthnpx skillsauth add qmu/workaholic select-scan-agentsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 7:51 AM6.3s2 files scanned
SKILL.md
- name:
- select-scan-agents
- description:
- Select scanner agents based on scan mode and branch changes.
Select Scan Agents
Determine which documentation agents to invoke based on scan mode.
Agent Tiers
- Managers (3): project-manager, architecture-manager, quality-manager -- run first, produce strategic context
- Leads (4): single
leadagent invoked with domain parameter (accessibility, security, validity, availability) -- run second, consume manager outputs - Writers (3): model-analyst, changelog-writer, terms-writer -- run alongside leads
Modes
- full: Returns all agents (3 managers, 4 leads with domain, 3 writers)
- partial: Analyzes
git diff --statagainst the base branch to select only relevant agents
Usage
bash ${CLAUDE_PLUGIN_ROOT}/skills/select-scan-agents/scripts/select.sh <mode> [base_branch]
Output
{"mode": "full|partial", "managers": ["project-manager", ...], "leads": [{"agent": "lead", "domain": "ux"}, ...], "writers": ["model-analyst", ...]}
Partial Scan Mapping
| Changed path | Agents triggered |
| --- | --- |
| plugins/work/commands/, plugins/work/agents/ | architecture-manager |
| plugins/work/skills/ | architecture-manager |
| plugins/work/rules/ | quality-manager, validity-lead |
| .workaholic/tickets/ | validity-lead, model-analyst |
| .workaholic/terms/ | terms-writer |
| .claude-plugin/, plugin config files | availability-lead |
| README.md, CLAUDE.md | accessibility-lead, project-manager |
| .github/ | availability-lead, security-lead |
| .workaholic/specs/, .workaholic/policies/ | (skipped - outputs) |
changelog-writer is always included in partial scan. When any lead domain is triggered, its corresponding manager is also triggered.
Related Skills
qmu/write-release-note
documentation
VerifiedTrustedCommunity
Release note content structure and guidelines for GitHub Releases.
1SKILL.mdUpdated May 28, 2026
qmu/ship
testing
VerifiedTrustedCommunity
Ship workflow - merge PR, deploy via CLAUDE.md, and verify production.
1SKILL.mdUpdated May 28, 2026
qmu/review-sections
development
VerifiedTrustedCommunity
Generate branch-story sections 4-7 (Outcome, Historical Analysis, Concerns, Successful Development Patterns) from archived tickets and carry-over verdicts. Used by the report workflow when assembling a PR story.
1SKILL.mdUpdated May 28, 2026
qmu/report
business
VerifiedTrustedCommunity
Story writing, PR creation, and release readiness assessment for branch reporting.
1SKILL.mdUpdated May 28, 2026