Token导航 LogoToken导航

Agent Skill · 前端设计

quality-advisor(质量顾问)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

quality-advisor 是前端设计类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为只读;许可证为 MIT,第三方扫描已通过,按安装量在前端设计类的 10,216 个 Skill 里排第 4,285。

总安装 933周安装 49GitHub Stars 14下载 388核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
MIT

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:quality-advisor(质量顾问)
来源仓库:https://github.com/vladm3105/aidoc-flow-framework
仓库路径:skills/quality-advisor
安装命令:
npx skills add https://github.com/vladm3105/aidoc-flow-framework --skill quality-advisor
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。不同来源提供的安装方式可能略有差异;本站展示可直接复制的安装命令,安装前请核对来源页面。

skills.shnpx skills
npx skills add https://github.com/vladm3105/aidoc-flow-framework --skill quality-advisor

这个 Skill 是做什么的

前端设计类 Skill 关注页面结构、视觉规范和组件写法,输出通常是可运行的界面代码。

quality-advisor 用于辅助安全审计、权限检查、凭据风险与认证流程分析,帮助 Agent 梳理敏感配置和依赖风险。适用于代码安全复核、鉴权逻辑验证或生成漏洞排查清单等场景。可结合具体任务调用其审计模块,输出结果需经人工复核再作为结论使用。涉及密钥、令牌或生产环境时,应先评估最小权限原则并确保数据脱敏。

适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。

来源仓库内路径:skills/quality-advisor

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/vladm3105/aidoc-flow-framework --skill quality…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它标注为只读,先用只读任务试一次,确认行为符合预期再扩大使用范围。

常见问题

6 条

quality-advisor 怎么安装?

在终端执行 npx skills add https://github.com/vladm3105/aidoc-flow-framework --skill quality-advisor。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

quality-advisor 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

quality-advisor 需要什么权限?

权限级别是只读。该 Skill 主要提供规则、说明或参考内容,本身偏只读;真正读写文件、联网或执行命令仍取决于宿主 Agent 的任务。

quality-advisor 是免费的吗?

来源标注的许可证是 MIT。本站不代收任何费用,也不托管安装包;能否商用、要不要署名,以许可证原文为准。

quality-advisor 用的人多吗?

公开数据是累计安装 933 次,近一周安装 49 次,下载 388 次,GitHub 14 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

quality-advisor 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。
  • 3 个目录同时收录,说明这个 Skill 流传比较广。
  • 许可证明确为 MIT,商用和分发边界好判断。
  • 第三方扫描已通过,常见的高风险行为没有命中。

先想清楚的地方

  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理前端设计类任务、又不想每次都手写提示词的人。
  • 需要许可证清楚、并且有第三方扫描结果的团队项目。

不太适合

  • 需要厂商级技术支持和 SLA 的生产系统。

前端设计类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
frontend-design

前端设计 · Codex、Claude

8,823,360126,072只读MIT通过
vercel-composition-patterns

Vercel 组合模式 · Codex、Claude

3,858,81625,893需要联网MIT通过
vercel-react-native-skills

Vercel React native skills 前端 · Codex、Claude

2,468,66425,878只读MIT通过
adapt

adapt 搜索 · Codex、Claude

2,027,04023,125操作浏览器未明确通过
bolder

bolder 分析 · Codex、Claude

2,004,28823,130只读未明确通过
quality-advisor

质量顾问 · 本页

93314只读MIT通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

quality-advisor

Purpose

Provide proactive quality guidance during artifact creation by monitoring section completion, detecting anti-patterns, and validating compliance with SDD standards.

Problem Solved: Documentation quality varies based on user expertise. Issues are typically found after artifact creation during validation, causing rework.

Solution: Real-time quality monitoring that identifies issues during creation, suggests improvements, and validates compliance before the artifact is complete.

When to Use This Skill

Use quality-advisor when:

  • Creating a new documentation artifact
  • Reviewing an artifact before submission
  • Want to check compliance with template requirements
  • Need guidance on common mistakes to avoid
  • Validating cumulative tagging compliance

Do NOT use when:

  • Full traceability validation needed (use trace-check)
  • Validating entire project (use doc-validator)
  • Non-SDD documentation

Skill Inputs

InputTypeRequiredDescription
artifact_contentstringYesCurrent content of artifact being created
artifact_typestringYesType of artifact (BRD, PRD, SPEC, etc.)
artifact_idstringNoDocument ID if assigned (e.g., PRD-00)
check_levelstringNoLevel of checks: "quick", "standard" (default), "strict"

Skill Workflow

Step 1: Identify Template Requirements

Load requirements for the specified artifact type:

Template Requirements by Type (per LAYER_REGISTRY v1.6):

LayerArtifactRequired SectionsMin TagsSpecial Requirements
1BRDDocument Control, Purpose, Stakeholders, Objectives, Requirements, Traceability0None
2PRDDocument Control, Problem, Goals, Non-Goals, User Needs, Features, KPIs, Traceability1 (@brd)KPIs must be quantitative
3EARSDocument Control, Requirements (WHEN-THE-SHALL), Traceability2 (@brd, @prd)EARS syntax validation
4BDDFeature, Scenarios, Tags3 (@brd, @prd, @ears)Gherkin syntax
5ADRDocument Control, Context, Decision, Rationale, Consequences, Traceability4 (@brd, @prd, @ears, @bdd)Decision must be explicit
6SYSDocument Control, System Requirements, Traceability5Technical specifications
7REQDocument Control, Requirement, Acceptance Criteria, Traceability6Atomic requirement
8CTRDocument Control, Interfaces, Data Models, Contract Clauses, Traceability7Dual-file format (md+yaml)
9SPECid, description, methods, traceability7YAML format
10TSPECDocument Control, Test Cases, Coverage, Traceability8UTEST/ITEST/STEST/FTEST types
11TASKSDocument Control, Tasks, Dependencies, Traceability9Actionable TODOs

Note: Layers 12-14 (CODE, TESTS, VALIDATION) are execution layers, not documentation artifacts.

Step 2: Check Section Completion

Verify all required sections are present and populated:

Section Detection:

# Section patterns by type
SECTION_PATTERNS = {
    "document_control": r"## Document Control",
    "problem_statement": r"## \d+\. Problem",
    "goals": r"## \d+\. Goals",
    "non_goals": r"## \d+\. Non-Goals",
    "traceability": r"## \d+\. Traceability|## 7\. Traceability",
    "kpis": r"## \d+\. KPIs|## KPIs",
    "acceptance_criteria": r"### Acceptance Criteria|## Acceptance",
}

Completion Scoring:

section_completion:
  document_control:
    present: true
    complete: true
    score: 100%
  problem_statement:
    present: true
    complete: true
    score: 100%
  goals:
    present: true
    complete: partial
    score: 60%
    issues:
      - "Goal G-003 missing success metric"
      - "Goals not prioritized (P0, P1, P2)"
  kpis:
    present: true
    complete: false
    score: 30%
    issues:
      - "KPI 'user adoption' lacks quantitative target"
      - "No performance metrics defined"
  traceability:
    present: true
    complete: partial
    score: 70%
    issues:
      - "Missing @brd tag (required for Layer 2)"
      - "Downstream artifacts section empty"
  overall_score: 72%

Step 3: Detect Anti-Patterns

Identify common documentation mistakes:

Anti-Pattern Catalog:

IDNameDescriptionSeverityDetection
AP-001Missing Document ControlNo version/status metadataErrorSection not found
AP-002Placeholder Text[TBD], TODO, XXX in contentWarningRegex match
AP-003Vague Acceptance CriteriaNo measurable outcomesWarningMissing numbers/percentages
AP-004Missing Traceability TagsRequired upstream tags absentErrorTag count check
AP-005Broken Internal Links[ID](path) links with invalid pathsErrorLink validation
AP-006ID Format ViolationNon-standard document IDErrorRegex match
AP-007Empty Required SectionSection header present but no contentWarningContent length check
AP-008Orphan ArtifactNo upstream referencesWarningTraceability check
AP-009Missing AnchorDocument lacks primary anchor IDWarningAnchor detection
AP-010Duplicate ID ReferenceSame ID referenced multiple timesInfoDuplicate check
AP-011Section Count Mismatchtotal_sections metadata differs from actual section filesErrorSEC-E001 validation
AP-012Cross-Reference Title MismatchLink text differs from target section headingErrorXREF-E001/E002 validation
AP-013Mixed ID NotationDocument uses both hyphen (TYPE-NN) and dot (TYPE.NN) formatsErrorIDPAT-E003 validation
AP-014Diagram-Text InconsistencyMermaid diagram components don't match prose claimsWarningDIAG-E001/W001 validation
AP-015Undefined AcronymAcronym used without first-use definitionErrorTERM-E002 validation
AP-016Count MismatchStated count (e.g., "18 requirements") differs from itemized totalErrorCOUNT-E001 validation
AP-017Forward Reference to Non-Existent DocumentUpstream doc references specific downstream IDs (e.g., PRD→ADR-01)ErrorFWDREF-E001 validation

Anti-Pattern Detection Output:

anti_patterns_detected:
  - id: AP-004
    name: Missing Traceability Tags
    severity: error
    location: "Section 7: Traceability"
    details: "PRD requires @brd tag (Layer 2 cumulative requirement)"
    suggestion: "Add '@brd: BRD.NN.EE.SS' to Traceability section"

  - id: AP-003
    name: Vague Acceptance Criteria
    severity: warning
    location: "Section 6: KPIs"
    details: "KPI 'improve user experience' has no measurable target"
    suggestion: "Add quantitative metric: 'User satisfaction ≥4.0/5.0'"

  - id: AP-002
    name: Placeholder Text
    severity: warning
    location: "Section 4: User Needs, line 45"
    details: "Found placeholder '[TBD]'"
    suggestion: "Replace with actual user need or remove section"

Step 4: Validate Cumulative Tagging

Check tag hierarchy compliance:

Tag Hierarchy by Layer (per LAYER_REGISTRY v1.6):

cumulative_tag_requirements:
  BRD:
    layer: 1
    required_tags: []
    tag_count: 0
  PRD:
    layer: 2
    required_tags: [@brd]
    tag_count: 1
  EARS:
    layer: 3
    required_tags: [@brd, @prd]
    tag_count: 2
  BDD:
    layer: 4
    required_tags: [@brd, @prd, @ears]
    tag_count: 3
  ADR:
    layer: 5
    required_tags: [@brd, @prd, @ears, @bdd]
    tag_count: 4
  SYS:
    layer: 6
    required_tags: [@brd, @prd, @ears, @bdd, @adr]
    tag_count: 5
  REQ:
    layer: 7
    required_tags: [@brd, @prd, @ears, @bdd, @adr, @sys]
    tag_count: 6
  CTR:
    layer: 8
    required_tags: [@brd, @prd, @ears, @bdd, @adr, @sys, @req]
    tag_count: 7
  SPEC:
    layer: 9
    required_tags: [@brd, @prd, @ears, @bdd, @adr, @sys, @req]
    optional_tags: [@ctr]
    tag_count: 7
  TSPEC:
    layer: 10
    required_tags: [@brd, @prd, @ears, @bdd, @adr, @sys, @req, @spec]
    optional_tags: [@ctr]
    tag_count: 8
  TASKS:
    layer: 11
    required_tags: [@brd, @prd, @ears, @bdd, @adr, @sys, @req, @spec, @tspec]
    optional_tags: [@ctr]
    tag_count: 9

Tag Validation Output:

tag_validation:
  artifact_type: PRD
  layer: 2
  required_tags: ["@brd"]
  found_tags: []
  missing_tags: ["@brd"]
  status: fail
  message: "Layer 2 artifact requires @brd tag"
  fix_suggestion: |
    Add to Traceability section:

@brd: BRD.001.003

Step 5: Check Naming Conventions

Validate document ID, element ID, and filename conventions per doc-naming skill.

Naming Rules (see doc-naming skill for complete standards):

naming_conventions:
  # Document ID format
  document_id_format: "{TYPE}-{NN}"  # e.g., PRD-01
  filename_format: "{TYPE}-{NN}_{slug}.md"  # e.g., PRD-01_authentication.md

  # Element ID format (unified)
  element_id_format: "{TYPE}.{NN}.{TT}.{SS}"  # e.g., PRD.01.0901

  # Threshold tag format
  threshold_format: "@threshold: {TYPE}.{NN}.{key}"  # e.g., @threshold: PRD.01.perf.auth.p99

  slug_rules:
    - lowercase
    - underscores for spaces
    - no special characters
    - descriptive of content

Naming Validation Output:

naming_validation:
  document_id: PRD-01
  id_format_valid: true
  filename: "PRD-01_authentication.md"
  filename_valid: true
  element_ids:
    total: 24
    valid: 22
    invalid: 2
    issues:
      - "PRD.01.2501 - code 25 not valid for PRD"
      - "US-001 - deprecated pattern, use PRD.01.09.SS"
  threshold_tags:
    total: 8
    valid: 7
    invalid: 1
    issues:
      - "perf.auth.p99 - missing TYPE.NN prefix"
  legacy_patterns_detected: 1

Reference: See doc-naming skill for complete element type codes and validation rules.

Step 6: Generate Quality Report

Assemble comprehensive quality assessment:

Quality Report Format:

quality_report:
  artifact_id: PRD-00
  artifact_type: PRD
  check_timestamp: 2025-11-29T14:30:00Z
  check_level: standard

  overall_status: warning
  quality_score: 72%

  summary:
    errors: 1
    warnings: 3
    info: 1
    passed_checks: 12

  section_completion:
    complete: 5
    partial: 2
    missing: 0
    score: 85%

  anti_patterns:
    - severity: error
      count: 1
      details: "Missing @brd tag"
    - severity: warning
      count: 3
      details: "Vague KPIs, placeholder text, incomplete goals"

  tag_compliance:
    status: fail
    required: 1
    found: 0
    missing: ["@brd"]

  naming_compliance:
    status: pass
    all_checks_passed: true

  recommendations:
    high_priority:
      - "Add @brd tag to Traceability section (required for Layer 2)"
    medium_priority:
      - "Add quantitative targets to KPIs"
      - "Remove [TBD] placeholder from User Needs section"
      - "Prioritize goals with P0, P1, P2 labels"
    low_priority:
      - "Consider adding more downstream artifact references"

  next_steps:
    - "Fix error-level issues before submission"
    - "Address warnings for quality improvement"
    - "Run trace-check after completion for full validation"

Example Usage

Example 1: Mid-Creation Check

User Request: "Check quality of my PRD in progress"

Quality Feedback:

quality_status: in_progress
current_score: 65%
blocking_issues:
  - "Missing Document Control section at top"
  - "No traceability section found"
improvement_suggestions:
  - "Add Document Control table before Section 1"
  - "Create Section 7: Traceability with @brd tag"
  - "Add measurable KPIs (currently vague)"
completion_estimate: "3 sections need attention"

Example 2: Pre-Submission Review

User Request: "Is this SPEC ready for submission?"

Quality Assessment:

submission_readiness: not_ready
blocking_issues:
  - severity: error
    issue: "Missing @req tag (required for Layer 10)"
  - severity: error
    issue: "YAML syntax error at line 45"
warnings:
  - "verification section references non-existent BDD-015"
  - "id field uses camelCase instead of snake_case"
recommendation: "Fix 2 errors before submission"

Example 3: Quick Compliance Check

User Request: "Quick check on tag compliance for this REQ"

Tag Check Output:

artifact_type: REQ
layer: 7
tag_compliance: pass
required_tags:
  - "@brd: BRD.01.0101 ✓"
  - "@prd: PRD.01.0701 ✓"
  - "@ears: EARS.01.2401 ✓"
  - "@bdd: BDD.01.1301 ✓"
  - "@adr: ADR-02 ✓"
  - "@sys: SYS.01.2501 ✓"
tag_count: "6/6 required tags present"
status: "Ready for downstream artifacts"

Integration with Other Skills

IntegrationDescription
doc-namingElement ID format, threshold tags, legacy pattern detection
doc-*-autopilotInvoked during Phase 3 (artifact generation) for real-time guidance
doc-*-validatorStructural validation (use quality-advisor for creation, validator for post-creation)
doc-*-reviewerContent review (use quality-advisor for creation, reviewer for final QA)
trace-checkShares validation logic for traceability checks
context-analyzerUses project context for reference validation

Quality Gates

Definition of Done

  • All required sections identified
  • Section completion scored
  • Anti-patterns detected and reported
  • Cumulative tagging validated
  • Naming conventions checked
  • Quality report generated
  • Actionable recommendations provided

Performance Targets

MetricTarget
Quick check latency<100ms
Standard check latency<500ms
Strict check latency<1s
False positive rate<5%

Traceability

Required Tags:

@prd: PRD.000.003
@adr: ADR-000

Upstream Sources

SourceTypeReference
PRD-00Product RequirementsPRD-00
ADR-000Architecture DecisionADR-000

Downstream Artifacts

ArtifactTypeReference
doc-* skillsSkill ConsumerQuality checks during creation

Version History

VersionDateChanges
1.1.02026-02-08Updated layer assignments per LAYER_REGISTRY v1.6; Added CTR (L8), TSPEC (L10); Fixed SPEC to L9, TASKS to L11; Integrated doc-naming skill for element ID validation
1.0.02025-11-29Initial release

Status: Active Author: AI Dev Flow Framework Team

平台分布

Gemini CLI

28.72%
按下载量换算111

Claude Code

22.46%
按下载量换算87

OpenCode

15.98%
按下载量换算62

Antigravity

11.36%
按下载量换算44

Codex

7.57%
按下载量换算29

windsurf

2.86%
按下载量换算11

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

只读

该 Skill 主要提供规则、说明或参考内容,本身偏只读;真正读写文件、联网或执行命令仍取决于宿主 Agent 的任务。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。

继续浏览同类 Skills