moai-foundation-quality

Validates codebases against TRUST 5 quality gates with proactive issue detection and CI/CD integration.

Updated Jun 18, 2026
One-click install
npx skills add https://github.com/h102-log/pdfrag --skill moai-foundation-quality-h102-log
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: moai-foundation-quality
Source: https://github.com/h102-log/pdfrag/tree/main/.claude/skills/moai-foundation-quality
Command: npx skills add https://github.com/h102-log/pdfrag --skill moai-foundation-quality-h102-log

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Enforcing consistent code quality across multi-language projects is difficult when reviews are manual, standards drift over time, and quality gates are missing from CI/CD pipelines. This Skill automates quality validation using the TRUST 5 framework (Testable, Readable, Unified, Secured, Trackable) so teams catch issues before merge. ## Core Features & Use Cases - TRUST 5 Quality Gates: Validate test coverage, readability, consistency, security (OWASP), and traceability against configurable thresholds. - Proactive Analysis: Scan for security vulnerabilities, performance hotspots, code duplication, and technical debt with prioritized recommendations. - Best Practices Enforcement: Validate code against up-to-date language standards via Context7 documentation integration, with support for Python, TypeScript, JavaScript, Go, and more. - CI/CD Integration: Ready-to-use GitHub Actions workflow with SARIF reporting, PR comments, and quality badges. - Use Case: A team lead adds the quality gate workflow to a pull request pipeline so any PR dropping test coverage below 85% or introducing critical security issues automatically fails the check. ## Quick Start Ask the AI to run a TRUST 5 quality analysis on the src directory with a quality threshold of 0.85 and report any failed principles.

Frequently Asked Questions about moai-foundation-quality

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add a code quality gate to a GitHub Actions pipeline?▼

Copy the provided quality-gate workflow template into .github/workflows and configure the quality threshold. The workflow runs TRUST 5 analysis on pull requests, posts a summary comment, uploads SARIF results, and fails the check when scores fall below the threshold.

What is the TRUST 5 framework for code quality?▼

TRUST 5 evaluates code across five principles: Testable (coverage and test quality), Readable (naming and complexity), Unified (style consistency), Secured (OWASP compliance), and Trackable (change traceability). Each principle has a configurable score threshold.

Which languages does this quality analysis support?▼

The skill supports over 25 languages with specialized rules, including Python (ruff, black, mypy), TypeScript and JavaScript (eslint, prettier), Go (golangci-lint), Java, Rust, C++, and C#. Language-specific style guides and linters are configurable.

Can I define custom quality rules for my project?▼

Yes, you can create CustomQualityRule classes with a validator function and severity level, then register them with the quality orchestrator. The documentation includes examples for naming conventions and security policy rules.

When should I not use this skill?▼

Do not use it for writing tests, which belongs to a testing workflow skill, or for debugging runtime errors, which requires a debugging agent. It focuses on static quality validation and standards enforcement, not test authoring or runtime diagnosis.