Verification & Quality Assurance

Verification & Quality Assurance is a skill for Claude Code, Codex from ruvnet/ruflo. It costs 36 tokens per session (5,073 once invoked), scanned A, original, MIT.

A code verification and quality-control toolkit that checks correctness, security, and code practices. It includes a real continuous-integration verification stack, while some described scoring, rollback, and dashboard features are still partly planned.

In plain words
What is it for?
Use it to run verification checks in CI, inspect truth scores where supported, and export quality results for continuous-integration pipelines.
Why use it?
It helps catch unreliable changes and regression bugs before they affect the codebase or a release.

Skill for Claude CodeCodex

Part of the claude-flow plugin — 134 skills, 52 commands, 11 agents, 4 hooks shipped together

About the project

Ruflo is an execution and coordination layer for Claude Code and Codex that equips AI coding agents with tools, memory, control loops, sandboxes, and collaboration mechanisms. Developers use it to organize specialized agents into swarms, coordinate workflows, retain knowledge across sessions, and communicate across machines. The catalogue entries are Ruflo’s skills, commands, agents, hooks, and plugin components.

ruvnet/ruflo · 70,334 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/ruvnet/ruflo/verification-quality
Any agent
npx skills add ruvnet/ruflo --skill verification-quality
Clone the repo
git clone --depth 1 https://github.com/ruvnet/ruflo

Made for: Claude Code, Codex.

Or install claude-flow, the plugin that ships this one along with the rest of its 134 skills, 52 commands, 11 agents, 4 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for Verification & Quality Assurance

README.md
[![agentmods](https://agentmods.dev/badge/skills/ruvnet/ruflo/verification-quality.svg)](https://agentmods.dev/skills/ruvnet/ruflo/verification-quality)
Your own site
<a href="https://agentmods.dev/skills/ruvnet/ruflo/verification-quality"><img src="https://agentmods.dev/badge/skills/ruvnet/ruflo/verification-quality.svg" alt="Measured on agentmods" height="20"></a>
Per session 36 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,073 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00036 $0.05073
Opus 5 $0.00018 $0.02537
Sonnet 5 $0.00007 $0.01015
Haiku 4.5 $0.00004 $0.00507

Measured yesterday against content hash 527604b4c3c4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

Verification & Quality Assurance scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -X POST https:/$pushgateway.example.com$metrics$job$claude-flow \
Origin

Copies of this mod

2 near-identical copies found in the catalogue:

.agents/skills/verification-quality/SKILL.md · 694 lines

How it starts

The opening of the file, as written. The whole thing — 694 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Verification & Quality Assurance Skill

What This Skill Does

This skill provides a comprehensive verification and quality assurance system that ensures code quality and correctness through:

  • Truth Scoring: Real-time reliability metrics (0.0-1.0 scale) for code, agents, and tasks
  • Verification Checks: Automated code correctness, security, and best practices validation
  • Automatic Rollback: Instant reversion of changes that fail verification (default threshold: 0.95)
  • Quality Metrics: Statistical analysis with trends, confidence intervals, and improvement tracking
  • CI/CD Integration: Export capabilities for continuous integration pipelines
  • Real-time Monitoring: Live dashboards and watch modes for ongoing verification

Shipped vs. aspirational. The concrete, in-CI verification stack — the 6 regression-guard jobs + the witness manifest + the tool-discoverability audit — is real and runs on every push. The truth-scoring / auto-rollback / WebSocket-dashboard surface described later in this doc is partly shipped (ruflo verify runs the witness checks) and partly design — treat the "CI Guards" section below as the authoritative current state.

CI Guards — what's actually shipped (current state)

Ruflo's regression protection is three layers, all gated before publish. Authoritative reference: verification/README.md.

Layer What CI job(s) in .github/workflows/v3-ci.yml ADR
1 — install/behavioral smoke Exercise user-visible failure modes against a real build smoke-install-no-bsqlite (npm install on platforms w/o prebuilds), plugin-hooks-smoke (#1859/#1862 — hook flag parsing), mcp-protocol-smoke (#1874 — HTTP MCP wire format), memory-import-smoke (#1883/#1884 — WSL path + key sanitization), mcp-roundtrip-smoke (#1889 paired-tool round-trip + #1863 cli-no-crash + ADR-095 G2 consensus-transport) ADR-102
1 — discoverability gate Every MCP tool description must answer "use this over native when?" tool-descriptions-auditscripts/audit-tool-descriptions.mjs, baseline at verification/mcp-tool-baseline.json (monotone-decreasing: noGuidance / tooShort / duplicates) ADR-112
2 — cryptographic witness Every documented fix's load-bearing marker must still be present in dist; Ed25519-signed, per-OS bundles witness-verify (ubuntu/macos/windows) — plugins/ruflo-core/scripts/witness/verify.mjs against verification/<os>/manifest.md.json ADR-103
3 — temporal history When was a regression introduced verification/<os>/history.jsonl + history.mjs (summary / regressions / timeline) ADR-103

Read the full file on GitHub · 694 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 694 lines · 36 tokens per session scan A 527604b4c3c4

Subscribe to this mod's changes

Verification & Quality Assurance is a skill published in the GitHub repository ruvnet/ruflo (70,334 stars, last pushed yesterday), licensed MIT. It adds 36 tokens to every session and 5,073 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other skills, from other repositories

Verification & Quality Assurance

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.

aegntic/cldcde · 36 tokens

Verification & Quality Assurance

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.

ruvnet/RuView · 36 tokens

Verification & Quality Assurance

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.

spencermarx/open-code-review · 36 tokens

verification-quality

Truth scoring, code-quality verification, and automatic rollback with a high accuracy threshold. Use when validating agent output before it ships, gating changes on quality, or adding a verify-and-rollback safety loop.

frankxai/claude-skills-library · 43 tokens

Verification & Quality Assurance

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.

ruvnet/agentic-flow · 36 tokens

Verification & Quality Assurance

Comprehensive truth scoring, code quality verification, and automatic rollback system with 0.95 accuracy threshold for ensuring high-quality agent outputs and codebase reliability.

proffesor-for-testing/agentic-qe · 36 tokens