What is verify-quality?

A code-quality checking skill that scans for complexity, repeated code, naming problems, and other code smells. Code smells are patterns that often make software harder to maintain.

Use it to check complex modules, refactors, pull requests, or code before committing, and to produce a quality report.

It gives developers a repeatable way to spot maintainability problems before they become harder to fix.

verify-quality — Skill for Claude Code by rockyflux

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add rockyflux/yq-workflow --skill verify-quality

Clone the repo

git clone --depth 1 https://github.com/rockyflux/yq-workflow

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/rockyflux/yq-workflow/verify-quality/github.svg)](https://agentmods.dev/skills/rockyflux/yq-workflow/verify-quality)

Your own site

<a href="https://agentmods.dev/skills/rockyflux/yq-workflow/verify-quality"><img src="https://agentmods.dev/badge/skills/rockyflux/yq-workflow/verify-quality/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/rockyflux/yq-workflow/verify-quality"><img src="https://agentmods.dev/badge/skills/rockyflux/yq-workflow/verify-quality.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 64 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,096 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 100% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00064	$0.01096
Opus 5	$0.00032	$0.00548
Sonnet 5	$0.00013	$0.00219
Haiku 4.5	$0.00006	$0.00110

Measured 6d ago against content hash 58bc95a2fe0a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

verify-quality scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/quality_checker.js), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to verify-quality — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

templates/skills/tools/verify-quality/SKILL.md · 161 lines

How it starts

The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.

⚖ 校验关卡 · 代码质量

核心原则

代码质量 = 可读性 + 可维护性 + 可测试性
劣质代码是技术债，技术债是道基裂痕
复杂度是 bug 的温床

自动检查

运行质量检查脚本（跨平台）：

# 在 skill 目录下运行
node scripts/quality_checker.js <扫描路径>
node scripts/quality_checker.js <扫描路径> -v      # 详细模式
node scripts/quality_checker.js <扫描路径> --json  # JSON 输出

检测指标

复杂度指标

指标	阈值	超标后果
圈复杂度	≤ 10	🟠 警告，建议拆分
函数长度	≤ 50 行	🟠 警告，建议拆分
文件长度	≤ 500 行	🟡 提示，考虑拆分
参数数量	≤ 5	🟠 警告，考虑封装
嵌套深度	≤ 4	🟠 警告，建议重构
行长度	≤ 120	🔵 提示

命名规范

类型	规范	示例
类名	PascalCase	`UserService`, `HttpClient`
函数名	snake_case	`get_user`, `process_data`
常量	UPPER_SNAKE	`MAX_RETRY`, `DEFAULT_TIMEOUT`
变量	snake_case	`user_id`, `total_count`

代码异味

异味	说明	严重度
重复代码	相似代码块 > 10 行	🟠 High
过长参数列表	参数 > 5 个	🟡 Medium
魔法数字	未命名的常量	🟡 Medium
死代码	未使用的函数/变量	🔵 Low
注释代码	被注释的代码块	🔵 Low

自动触发时机

场景	触发条件
复杂模块	代码行数 > 200
重构完成	重构任务完成时
代码审查	PR/MR 审查时
提交前	代码提交前检查

校验流程

1. 扫描代码文件
2. 计算复杂度指标
3. 检测代码异味
4. 验证命名规范
5. 输出质量校验报告

校验报告格式

## 代码质量校验报告

✓ 通过 | ✗ 未通过

### 复杂度指标
- 平均函数复杂度: N
- 超标函数数: N
- 最大文件行数: N

### 代码异味
- 🟠 High: N
- 🟡 Medium: N
- 🔵 Low: N

### 问题清单

| 文件 | 行号 | 类型 | 严重度 | 描述 |
|------|------|------|--------|------|
| ... | ... | ... | ... | ... |

### 结论
可交付 / 需重构后交付

重构建议

降低复杂度

# 🔴 高复杂度 - 道基不稳
def process(data):
    if condition1:
        if condition2:
            if condition3:
                # 深层嵌套
                pass

# ✅ 低复杂度 - 道基稳固
def process(data):
    if not condition1:
        return
    if not condition2:
        return
    if not condition3:
        return
    # 主逻辑

消除重复

# 🔴 重复代码 - 异端
def func1():
    # 10行相同逻辑
    pass

def func2():
    # 10行相同逻辑
    pass

# ✅ 提取公共函数 - 正道
def common_logic():
    # 公共逻辑
    pass

def func1():
    common_logic()

def func2():
    common_logic()

Read the full file on GitHub · 161 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

scripts/quality_checker.js 11 KB runs code

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

6d ago First seen · 161 lines · 64 tokens per session scan A 58bc95a2fe0a

Subscribe to this mod's changes

verify-quality is a skill published in the GitHub repository rockyflux/yq-workflow (2 stars, last pushed 3mo ago), licensed MIT. It adds 64 tokens to every session and 1,096 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to verify-quality, differing in 0 lines, and is treated as a copy.

Code review Debugging

adversarial-reviewer

Adversarial code review that assumes bugs exist and hunts for them. Use when asked to review code, find bugs, audit for correctness, stress-test a PR, or when someone says "tear this apart" or "what's wrong with this". Give no benefit of the doubt — every line is guilty until proven innocent.

emdash-cms/emdash · 71 tokens

gsd-ns-review

Route to the appropriate quality / review skill based on the user's intent. gsd-code-review-fix was absorbed by gsd-code-review --fix in #2790.

open-gsd/gsd-core · 16 tokens

issue

Use when starting a chain from a GitHub issue — turning an issue URL or number into a triaged, planned, dispatched, and reviewed pull request. Classifies the thread (bug → root-cause discipline, feature → plan chain, question → drafted reply), synthesizes a spec from the issue's own acceptance criteria, then runs the…

jeremylongshore/tons-of-skills-marketplace · 115 tokens

verify-quality