npx claudepluginhub first-fluke/oh-my-agent --plugin omaThis skill uses the workspace's default tool permissions.
Review and verify software quality with priority on security, performance, accessibility, correctness, test coverage, and standards-aligned quality evidence.
Audits tools, frameworks, systems, and codebases against industry standards with 1-10 scoring across 12 dimensions including code quality, architecture, security, and performance.
Performs comprehensive quality audits verifying planning conformance, DDD validation, security checks, tests, browser verification, and metrics before deployment or PR merge.
Runs tiered quality gates (Quick, Standard, Ship) with static analysis, linting, tests, bug scans, code review, performance checks, and security audits for TypeScript/JavaScript, Python, Go.
Share bugs, ideas, or general feedback.
Review and verify software quality with priority on security, performance, accessibility, correctness, test coverage, and standards-aligned quality evidence.
resources/execution-protocol.md, examples, ISO guide, checklist, and self-checknpm audit, bandit, lighthouse, linters, tests, and coverage tools when applicableresources/iso-quality.md.| Action | SSL primitive | Evidence |
|---|---|---|
| Read review scope and code | READ | Diff, files, reports |
| Select quality checks | SELECT | Security/performance/accessibility/test dimensions |
| Run automated tools | CALL_TOOL | Audit, lint, tests, Lighthouse, coverage |
| Compare behavior to standards | COMPARE | OWASP, WCAG, ISO guides |
| Validate findings | VALIDATE | Reproducibility and evidence |
| Write review report | WRITE | Findings and remediation |
| Notify outcome | NOTIFY | Final review summary |
npm audit
bandit -r .
lighthouse <url>
Run only the tools that match the detected stack and available target. Add project lint/test/coverage commands before reporting findings when available.
| Scope | Resource target |
|---|---|
CODEBASE | Reviewed source, tests, configs, and diff |
PROCESS | Automated QA/security/performance/accessibility commands |
LOCAL_FS | Reports, coverage output, review artifacts |
USER_DATA | User-provided acceptance and quality criteria |
npm audit, bandit, lighthouseFollow resources/execution-protocol.md step by step.
See resources/examples.md for input/output examples.
Use resources/iso-quality.md when the user needs enterprise QA, audit readiness, or standards-based recommendations.
Before submitting, run resources/self-check.md.
Vendor-specific execution protocols are injected automatically by oma agent:spawn.
Source files live under ../_shared/runtime/execution-protocols/{vendor}.md.
resources/execution-protocol.mdresources/examples.mdresources/iso-quality.mdresources/checklist.mdresources/self-check.mdresources/error-playbook.md../_shared/core/context-loading.md../_shared/core/context-budget.md../_shared/core/lessons-learned.md