qa-specialist-cicd

qa-specialist-cicd is a skill for Claude Code from pwdev-solucoes/pwdev-claude-marketplace. It costs 25 tokens per session (1,095 once invoked), scanned A, original, Apache-2.0.

A continuous-integration and delivery guide for designing automated quality gates and keeping test verdicts separate from the success of exporting reports. CI/CD means automated checks and delivery steps run by a build system.

In plain words
What is it for?
It helps plan deterministic CI jobs, quality gates, artifact validation, retention, and protected branch or release checks.
Why use it?
It prevents a successful report-export command from being mistaken for a passing QA assessment, or a failed export from hiding the actual test verdict. It also makes permissions, dependencies, retries, and artifacts explicit.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the pwdev-qa plugin — 16 skills, 6 commands shipped together

Good fit It helps plan deterministic CI jobs, quality gates, artifact validation, retention, and protected branch or release checks.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add pwdev-solucoes/pwdev-claude-marketplace --skill qa-specialist-cicd
Clone the repo
git clone --depth 1 https://github.com/pwdev-solucoes/pwdev-claude-marketplace

Made for: Claude Code.

Or install pwdev-qa, the plugin that ships this one along with the rest of its 16 skills, 6 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for qa-specialist-cicd

README.md
[![agentmods](https://agentmods.dev/badge/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd/github.svg)](https://agentmods.dev/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd)
Your own site
<a href="https://agentmods.dev/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd"><img src="https://agentmods.dev/badge/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for qa-specialist-cicd

Your own site · 80×15
<a href="https://agentmods.dev/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd"><img src="https://agentmods.dev/badge/skills/pwdev-solucoes/pwdev-claude-marketplace/qa-specialist-cicd.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 25 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,095 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00025 $0.01095
Opus 5.5 $0.00010 $0.00438
Sonnet 5.5 $0.00005 $0.00219
Haiku 4.5 $0.00003 $0.00110

Measured 1mo ago against content hash 7e4042fb72a1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

qa-specialist-cicd scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/pwdev-qa/skills/qa-specialist-cicd/SKILL.md · 93 lines

How it starts

The opening of the file, as written. The whole thing — 93 lines — stays where its author put it; the contents beside it link to each section on GitHub.

QA CI/CD specialist

Use this specialist when a QA workflow needs CI execution, artifacts, or quality-gate advice. This specialist does not execute a workflow or pipeline and cannot grant authorization. Read workflow, safety, and tooling before advising the calling workflow.

Inputs

  • Target, identified contract, preserved criterion IDs/text, branch or release policy, protected environments, required approvals, and allowed CI operations.
  • Normalized QA manifest/report path, schema version, manifest verdict, criterion/case results, defects, diagnostics, and verified evidence references.
  • Export command result with exit code, export_status, output paths, and artifact validation, kept separate from the QA assessment.
  • Runner and prerequisite probes, deterministic commands, dependency/cache policy, secret and permission boundaries, timeout/retry policy, and artifact retention rules.

Procedure

  1. Preserve the target, contract, criteria, statuses, approvals, and pipeline policy. Do not grant approval, mutate protected configuration, deploy, publish, merge, or infer authorization.
  2. Define isolated, deterministic jobs with pinned project dependencies, least privilege, explicit inputs, timeouts, visible retries, cleanup, and retained evidence. Classify tools from supplied probes as available, missing, or unverified; never install automatically.
  3. Validate the normalized manifest and read its verdict as the authoritative source for the QA gate. Apply PASS, FAIL, or BLOCKED exactly; preserve case and criterion statuses.
  4. Evaluate report export independently. Exit code 0 means both formats exported, even when QA is FAIL or BLOCKED; code 2 means invalid input/security; code 3 means missing dependency or incomplete export. The export exit code does not determine or rewrite the QA verdict.
  5. Expose both dimensions in CI: the QA gate from manifest verdict and the export/artifact status from the exporter. A pipeline may report or stop for either policy reason without conflating them.
  6. Preserve failure and pass attempts for flaky checks. Do not rerun until pass or discard a proven failure; require evidence, reproduction, ownership, and a bounded quarantine.
  7. Return gate inputs, independent decisions, probe evidence, artifacts, blockers, and the next authorized action without triggering external effects.

Read the full file on GitHub · 93 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 93 lines · 25 tokens per session scan A 7e4042fb72a1

Subscribe to this mod's changes

qa-specialist-cicd is a skill published in the GitHub repository pwdev-solucoes/pwdev-claude-marketplace (3 stars, last pushed 10d ago), licensed Apache-2.0. It adds 25 tokens to every session and 1,095 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.

Related

Other skills, from other repositories

Verification & Quality Assurance

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.

ruvnet/ruflo · 36 tokens

quality-scan

Run a scoped, read-only quality scan and report exact-candidate evidence, failures and frozen debt. Use for an ad-hoc gate sweep or release preparation; a static scan is not full release acceptance.

diegosouzapw/OmniRoute · 45 tokens

e2e-testing

Use when reviewing CI coverage, automated checks, or test strategy related to Implement end-to-end testing. Focus on whether the rule is continuously verified, not just documented.

thedaviddias/Front-End-Checklist · 38 tokens

mirrord-prev-env

Help users create and manage mirrord preview environments — running a modified service as an isolated pod in a shared Kubernetes cluster, scoped by an environment key and HTTP/queue traffic filtering, so teams can validate and review changes against real traffic without affecting live services. Use when a developer…

metalbear-co/mirrord · 122 tokens

test-setup

Scaffold the test framework and CI — tests/ directory, engine test runner, GitHub Actions workflow. Once, before the first sprint.

Donchitos/Claude-Code-Game-Studios · 32 tokens

ci

Configure Ginkgo for continuous integration — the recommended CLI flag set and the rationale for each flag (-r -p --randomize-all --randomize-suites --fail-on-pending --fail-on-empty --keep-going --cover --race --trace --json-report --timeout --poll-progress-after/-interval), invoking via go run to pin the CLI to…

onsi/ginkgo · 151 tokens