Borrowing it
Nothing to install: this file belongs to Kandil7/prprompts-flutter-generator. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Kandil7/prprompts-flutter-generator/master/.claude/commands/automation/qa-check.mdgit clone --depth 1 https://github.com/Kandil7/prprompts-flutter-generatorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/kandil7/prprompts-flutter-generator/qa-check)<a href="https://agentmods.dev/commands/kandil7/prprompts-flutter-generator/qa-check"><img src="https://agentmods.dev/badge/commands/kandil7/prprompts-flutter-generator/qa-check.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.00869 |
| Opus 5 | $0.00000 | $0.00434 |
| Sonnet 5 | $0.00000 | $0.00174 |
| Haiku 4.5 | $0.00000 | $0.00087 |
Grade A, and why
qa-check scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 137 lines — stays where its author put it; the contents beside it link to each section on GitHub.
QA Check (PRPROMPTS Compliance Audit)
Comprehensive quality check against all PRPROMPTS.
1. PRPROMPTS Compliance Scan
For each PRPROMPTS file (1-32), check relevant sections:
Architecture Compliance (Files 1-10)
-
@PRPROMPTS/01-feature_scaffold.md
- Folder structure matches specification
- Clean Architecture layers separated
- No business logic in presentation
-
@PRPROMPTS/03-bloc_implementation.md
- All BLoCs use events/states pattern
- No direct API calls in BLoCs
- Repository pattern used
-
@PRPROMPTS/06-design_system.md
- No hardcoded colors
- Theme consistency
- Material 3 compliance
Security Compliance (File 16)
@PRPROMPTS/16-security_and_compliance.md:
JWT Verification:
# Search for insecure patterns
grep -r "JWT.*sign" lib/
# Should return: NO RESULTS (Flutter never signs!)
grep -r "HS256" lib/
# Should return: NO RESULTS (only RS256 allowed!)
PII/PHI Encryption:
# Check for unencrypted sensitive data
grep -r "SharedPreferences.*ssn\|creditCard\|password" lib/
# Should return: NO RESULTS (must use secure storage!)
PCI-DSS Compliance:
# Check for stored card numbers
grep -r "cardNumber\|creditCard.*[0-9]" lib/
# Should return: Only tokenized references
Testing Compliance (File 5)
@PRPROMPTS/05-testing_strategy.md:
flutter test --coverage
# Check coverage: Should be > 70%
2. Static Analysis
flutter analyze --fatal-infos
Zero issues required.
3. Security Audit Checklist
Execute all items from @PRPROMPTS/14-security_audit_checklist.md:
- No API keys in code
- Certificate pinning configured
- Secure storage for tokens
- Input validation everywhere
- SQL injection prevention
- XSS prevention in WebViews
4. PRD Requirements Check
Compare @docs/PRD.md against implemented features:
Required Features: [X]
Implemented: [Y]
Missing: [Z]
Compliance Required: [HIPAA/PCI-DSS/GDPR]
Compliance Implemented: [Verified/Not Verified]
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 137 lines · 0 tokens per session scan A e37f55b60caf
qa-check is a command published in the GitHub repository Kandil7/prprompts-flutter-generator (11 stars, last pushed 9mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 869 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
speckit.bug.fetch
Load an existing GitHub issue into the bug workflow (the complement of bug.issue) and seed a triage draft.
speckit.chore.fetch
Load an existing GitHub issue into the chore workflow and seed a triage draft.
speckit.chore.implement
Implement the scoped chore (the actual maintenance work) and record what changed.
speckit.chore.issue
File a GitHub issue from a chore assessment (the 'report' phase) and record the issue link.
speckit.gh-triage.feature
Create a GitHub issue describing a new feature, label it with the configured feature label, and optionally auto-run speckit.specify to turn it into a spec.
speckit.bug.pr
Open a pull request for the applied bug fix, linking the tracked issue.