メニュー
Run the DQIII8 quality pipeline — format (Black), imports (isort), lint (ruff), tests (pytest), security scan. Used internally by checkpoint and pre-commit flows.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | quality-gate |
| description | Run the DQIII8 quality pipeline — format (Black), imports (isort), lint (ruff), tests (pytest), security scan. Used internally by checkpoint and pre-commit flows. |
| command | /quality-gate |
| allowed-tools | ["Bash"] |
| user-invocable | false |
Run the DQIII8 quality pipeline for a file or directory scope.
/quality-gate [path|.] [--fix] [--strict]
.)--fix: allow auto-format/fix where supported (Black, isort)--strict: treat warnings as errorsRun these phases in order. Stop on first failure unless --strict is passed.
black --check [path] 2>&1 | tail -15
# With --fix:
black [path]
isort --check-only [path] 2>&1 | head -10
# With --fix:
isort [path]
ruff check [path] --select E,F,W 2>&1 | head -30
Fail on E and F codes. W codes: report only.
python3 -m pytest tests/ -x -q --tb=short 2>&1 | tail -20
With --strict: fail on warnings too (-W error).
grep -rn "shell=True" [path] --include="*.py" | grep -v "#\|test_"
grep -rn "f['\"].*SELECT\|f['\"].*INSERT\|f['\"].*DELETE" [path] --include="*.py"
Both must return empty.
QUALITY GATE — [path]
=====================
Phase 1 Format: PASS
Phase 2 Imports: PASS / SKIP (isort not installed)
Phase 3 Lint: PASS / FAIL — 3 errors
Phase 4 Tests: PASS — 12 passed in 0.8s
Phase 5 Security: PASS
RESULT: PASS / BLOCKED
python-specialist hands off code/checkpoint create flowverification-loop skill — more detailed phase-by-phase protocoltdd-workflow skill — write tests before running thissecurity-review skill — deeper checklist for auth/secrets codeSkill para despachar tareas a agentes NIM/Groq/GitHub desde esta sesión CC. Habilita el Hermes Work Loop — CC orquesta, agentes B/B+ ejecutan.
Upload DOCX files from intl-reports to Google Drive Carpeta 3 using rclone. Zero reasoning — action only.
Defensive security — reads red-team findings and systematically patches every vulnerability. Hardens code, adds input validation, fixes permissions, and verifies each fix. Works from the latest red-team report.
Launch an efficiency audit on modified Python files using Aider + Gemini 2.0 Flash. Analyzes bugs, efficiency, readability, and security. Saves report to database/audit_reports/.
Genera y entrega informes de internacionalización (Diagnóstico + Plan) para pymes españolas. Batch pipeline via Orchestrator v4 (core.cli) desde tmux externo. NUNCA empresa-a-empresa con Agent Haiku manual.
Adversarial security testing — attempts to break the codebase using real hacker techniques. Tests OWASP Top 10, prompt injection, MCP poisoning, dependency attacks, auth bypass, and vibe-coding-specific patterns. Generates exploit report. NEVER auto-invoked — user must explicitly request.