Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add pwdev-solucoes/pwdev-claude-marketplace --skill qa-specialist-cicdgit clone --depth 1 https://github.com/pwdev-solucoes/pwdev-claude-marketplaceWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd)<a href="https://agentmods.dev/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd"><img src="https://agentmods.dev/badge/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd"><img src="https://agentmods.dev/badge/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.01095 |
| Opus 5.5 | $0.00010 | $0.00438 |
| Sonnet 5.5 | $0.00005 | $0.00219 |
| Haiku 4.5 | $0.00003 | $0.00110 |
Grade A, and why
qa-specialist-cicd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 93 lines — stays where its author put it; the contents beside it link to each section on GitHub.
QA CI/CD specialist
Use this specialist when a QA workflow needs CI execution, artifacts, or quality-gate advice. This specialist does not execute a workflow or pipeline and cannot grant authorization. Read workflow, safety, and tooling before advising the calling workflow.
Inputs
- Target, identified contract, preserved criterion IDs/text, branch or release policy, protected environments, required approvals, and allowed CI operations.
- Normalized QA manifest/report path, schema version, manifest
verdict, criterion/case results, defects, diagnostics, and verified evidence references. - Export command result with exit code,
export_status, output paths, and artifact validation, kept separate from the QA assessment. - Runner and prerequisite probes, deterministic commands, dependency/cache policy, secret and permission boundaries, timeout/retry policy, and artifact retention rules.
Procedure
- Preserve the target, contract, criteria, statuses, approvals, and pipeline policy. Do not grant approval, mutate protected configuration, deploy, publish, merge, or infer authorization.
- Define isolated, deterministic jobs with pinned project dependencies, least privilege,
explicit inputs, timeouts, visible retries, cleanup, and retained evidence. Classify tools from
supplied probes as
available,missing, orunverified; never install automatically. - Validate the normalized manifest and read its
verdictas the authoritative source for the QA gate. ApplyPASS,FAIL, orBLOCKEDexactly; preserve case and criterion statuses. - Evaluate report export independently. Exit code
0means both formats exported, even when QA isFAILorBLOCKED; code2means invalid input/security; code3means missing dependency or incomplete export. The export exit code does not determine or rewrite the QA verdict. - Expose both dimensions in CI: the QA gate from manifest verdict and the export/artifact status from the exporter. A pipeline may report or stop for either policy reason without conflating them.
- Preserve failure and pass attempts for flaky checks. Do not rerun until pass or discard a proven failure; require evidence, reproduction, ownership, and a bounded quarantine.
- Return gate inputs, independent decisions, probe evidence, artifacts, blockers, and the next authorized action without triggering external effects.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 93 lines · 25 tokens per session scan A 7e4042fb72a1
qa-specialist-cicd is a skill published in the GitHub repository pwdev-solucoes/pwdev-claude-marketplace (3 stars, last pushed 10d ago), licensed Apache-2.0. It adds 25 tokens to every session and 1,095 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.
Other skills, from other repositories
Verification & Quality Assurance
Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.
quality-scan
Run a scoped, read-only quality scan and report exact-candidate evidence, failures and frozen debt. Use for an ad-hoc gate sweep or release preparation; a static scan is not full release acceptance.
e2e-testing
Use when reviewing CI coverage, automated checks, or test strategy related to Implement end-to-end testing. Focus on whether the rule is continuously verified, not just documented.
mirrord-prev-env
Help users create and manage mirrord preview environments — running a modified service as an isolated pod in a shared Kubernetes cluster, scoped by an environment key and HTTP/queue traffic filtering, so teams can validate and review changes against real traffic without affecting live services. Use when a developer…
test-setup
Scaffold the test framework and CI — tests/ directory, engine test runner, GitHub Actions workflow. Once, before the first sprint.
ci
Configure Ginkgo for continuous integration — the recommended CLI flag set and the rationale for each flag (-r -p --randomize-all --randomize-suites --fail-on-pending --fail-on-empty --keep-going --cover --race --trace --json-report --timeout --poll-progress-after/-interval), invoking via go run to pin the CLI to…