Run any Skill in Manus with one click

scan-check

Stars22

Forks6

UpdatedJuly 14, 2026 at 16:34

Predict the plugins.qgis.org Security & Quality scan locally (flake8 + Bandit), no Docker needed. Use before any upload/release, or after a change, to confirm the plugin still scans with zero findings.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

vukovicvl

vukovicvl/fiberq

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

SKILL.md

readonly

name	scan-check
description	Predict the plugins.qgis.org Security & Quality scan locally (flake8 + Bandit), no Docker needed. Use before any upload/release, or after a change, to confirm the plugin still scans with zero findings.

Run the same checks the plugins.qgis.org scanner runs, locally and fast, and report the counts.

Procedure (from the repo root)

flake8 in isolated mode — mirrors the scanner exactly (config files are ignored):
```
python -m flake8 --isolated --max-line-length=120 --ignore=E501 fiberq
```
Bandit at ALL severities (the scanner flags LOW too — e.g. B110/B112 try/except/pass|continue — so -ll is not enough):
```
python -m bandit -r fiberq -q -c pyproject.toml
```
Report: flake8 finding count and total Bandit count (all severities). The gate is 0 / 0.
If anything fires, list each finding with file:line and the code, and say whether it should be fixed or (rarely, with a stated reason) silenced with an inline # noqa: <code> / Bandit annotation.

Notes

"0 findings" today rests partly on intentional inline # noqas for style codes that are tracked debt — do not strip those as "cleanup".
This is lint-only. For the full gate including running tests in QGIS, use green.

More from this repository

same repository

green

vukovicvl/fiberq

Run the FiberQ lint+test gate inside the official QGIS Docker images (the same thing CI runs) and report pass/fail per image. Use to make the build green locally before pushing or opening a PR. Requires Docker.

2026-06-2922

prepublish

vukovicvl/fiberq

Run the FiberQ pre-publish checklist for a release (version sync, changelog, scan-clean, tests green, package builds, GenAI disclosure, secrets, manual-test reminder). Use right before tagging/publishing a version. Reports a readiness status; never pushes or uploads.

2026-06-2922

wp-status

vukovicvl/fiberq

Summarise where the FiberQ build is — current work package / phase, what's done, what's next, and the per-task definition of done. Use to orient at the start of a session or before starting a new task.

2026-06-2922

name	scan-check
description	Predict the plugins.qgis.org Security & Quality scan locally (flake8 + Bandit), no Docker needed. Use before any upload/release, or after a change, to confirm the plugin still scans with zero findings.

Run the same checks the plugins.qgis.org scanner runs, locally and fast, and report the counts.

Procedure (from the repo root)

flake8 in isolated mode — mirrors the scanner exactly (config files are ignored):
```
python -m flake8 --isolated --max-line-length=120 --ignore=E501 fiberq
```
Bandit at ALL severities (the scanner flags LOW too — e.g. B110/B112 try/except/pass|continue — so -ll is not enough):
```
python -m bandit -r fiberq -q -c pyproject.toml
```
Report: flake8 finding count and total Bandit count (all severities). The gate is 0 / 0.
If anything fires, list each finding with file:line and the code, and say whether it should be fixed or (rarely, with a stated reason) silenced with an inline # noqa: <code> / Bandit annotation.

Notes

"0 findings" today rests partly on intentional inline # noqas for style codes that are tracked debt — do not strip those as "cleanup".
This is lint-only. For the full gate including running tests in QGIS, use green.