tjboudreaux/eng-rigorous-validation
skills/eng-rigorous-validation/SKILL.md
Enforce reproducible testing, automated verification, and evidence-driven sign-off before merging any change.
$ install --global
skillsauthnpx skillsauth add tjboudreaux/cc-plugin-engineering-excellence eng-rigorous-validationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 9:00 PM1.8s1 file scanned
SKILL.md
- name:
- eng-rigorous-validation
- description:
- Enforce reproducible testing, automated verification, and evidence-driven sign-off before merging any change.
Rigorous Validation
Intent
- Ship only when behavior is proven, not assumed.
- Treat tests, QA scripts, linters, and on-chain/off-chain simulations as first-class deliverables.
- Capture evidence so reviewers can verify quickly.
Inputs
- Canonical test commands (unit, integration, e2e, contract sims, UI snapshots).
- Acceptance criteria plus measurable signals (logs, screenshots, transaction hashes).
- Migrations/seed data steps required to exercise the change locally.
Workflow
- Design tests before coding
- Specify failing cases and target assertions for each requirement.
- Align on how to stub external services, wallets, or platform APIs.
- Automate and isolate
- Prefer deterministic, headless test harnesses; avoid manual-only steps.
- Seed data/fixtures close to tests to prevent global coupling.
- Run the full relevant matrix
- Cover affected platforms (iOS/Android/web), runtimes, or chain environments.
- Capture artifacts (logs, screenshots, traces) for any non-deterministic checks.
- Track outcomes
- Record exact commands run and their commit hash in the PR or issue.
- File follow-ups for flaky tests before merging.
Verification
- All targeted tests green and documented; no TODOs or skipped suites without owner sign-off.
- Static analysis, type-checking, formatters, and contract analyzers pass.
- Evidence (artifacts, hashes, screenshots) attached or linked for reviewer inspection.
Related Skills
tjboudreaux/tools-debugging-root-cause
tools
VerifiedTrustedCommunity
Systematic debugging playbook for tracing failures backward through the call chain, adding instrumentation, and fixing bugs at their origin.
1SKILL.mdUpdated Apr 17, 2026
tjboudreaux/meta-superpowers
testing
VerifiedTrustedCommunity
Startup protocol for every task—discover applicable skills, run them, announce usage, and follow required workflows (brainstorming, TodoWrite checklists, etc.).
1SKILL.mdUpdated Apr 17, 2026
tjboudreaux/eng-verification
testing
VerifiedTrustedCommunity
Mandatory checklist before claiming work is complete—run the evidence-producing command, inspect output, and only then state a result.
1SKILL.mdUpdated Apr 17, 2026
tjboudreaux/eng-user-impact
testing
VerifiedTrustedCommunity
Anchor every engineering decision in user value, measurable outcomes, accessibility, and cross-platform experience coherence.
1SKILL.mdUpdated Apr 17, 2026