moai-foundation-quality

Enforces TRUST 5 quality principles through agents, gate commands, and harness levels.

Updated Aug 29, 2026
One-click install
npx skills add https://github.com/Seung-zedd/secure-file-upload --skill moai-foundation-quality-seung-zedd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: moai-foundation-quality
Source: https://github.com/Seung-zedd/secure-file-upload/tree/main/.claude/skills/moai-foundation-quality
Command: npx skills add https://github.com/Seung-zedd/secure-file-upload --skill moai-foundation-quality-seung-zedd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Code quality standards often exist only as vague guidelines that teams apply inconsistently. This Skill documents how MoAI enforces the TRUST 5 quality dimensions (Tested, Readable, Unified, Secured, Trackable) through concrete mechanisms: gate commands, agent roles, harness levels, and independent audit scoring. ## Core Features & Use Cases - TRUST 5 Assessment Framework: Apply five quality dimensions as per-change checklists with justified-skip guards and coverage thresholds (85% default, 90% for critical packages). - Quality Gate Orchestration: Run lint, format, type-check, and test in parallel via /moai gate with language-aware toolchain detection across 16 languages. - Independent Audit Scoring: Use sync-auditor's 4-dimension scoring (Functionality, Security, Craft, Consistency) computed as a harmonic mean to penalize lopsided quality. - Use Case: Before committing a new authentication endpoint, run the gate for a fast signal, assess all five TRUST 5 dimensions, and triage findings by severity with per-line suppressions instead of global rule disabling. ## Quick Start Ask the AI to assess the current change against the TRUST 5 principles and triage any gate findings by severity.

Frequently Asked Questions about moai-foundation-quality

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a pre-commit quality gate on my code?▼

Run /moai gate, which executes lint, format, type-check, and test in parallel without applying fixes. It auto-detects the project language and runs the appropriate toolchain, skipping tools that are not installed.

What are the TRUST 5 code quality principles?▼

TRUST 5 stands for Tested, Readable, Unified, Secured, and Trackable. Each principle is an assessment question applied to every change, covering test coverage, naming clarity, convention consistency, input validation, and commit traceability.

How does sync-auditor score code quality?▼

sync-auditor scores four dimensions: Functionality, Security, Craft, and Consistency. The overall score is the harmonic mean, not the average, so a single weak dimension like security drags the result down and blocks a pass.

What coverage threshold should my project meet?▼

The default threshold is 85% at the package level and 90% or higher for critical packages such as cli, template, and hook. A coverage figure is only valid when the coverage command was actually run and its output observed.

When should I use the thorough harness level instead of minimal?▼

Use thorough for large SPECs, high-risk changes, or security-sensitive work, since it adds /moai review and full sync-auditor scoring. Minimal fits small low-risk SPECs and runs only lint, type-check, and test.

Why should I not disable linter rules globally to fix warnings?▼

Global suppression hides real defects and trains teams to ignore warnings. The sanctioned approach is per-line suppression with a stated reason for false positives, keeping the rule active for all other code.