Quality

WP Guard reviews generated or changed WordPress code — plugins, themes, and blocks — before it ships. Use it after an agent writes or edits WordPress code to catch escaping, sanitization, nonce, database query, i18n, and performance violations.

Audit Onboarding Proposal independently audits a brownfield onboarding transcript, operational map, or proposed documentation patch before application. Use it to verify first-pass onboarding work, distinguish environment-caused unknowns from reasoning defects, score gates, or decide patch admissibility.

Encode Invariant converts accepted repository rules into the smallest repository-native mechanical validation with positive and negative proof and precise enforcement-level reporting. Use it to enforce architecture, reliability, security, or quality boundaries and prevent documented violations from recurring.

Engineering Wisdom provides a repository-grounded engineering review using contextual heuristics for code clarity, SOLID and design, testing, refactoring, architecture, and professional practice. Use only when explicitly invoked; it does not rewrite architecture or turn advice into repository policy.

API Patterns Reference documents REST and GraphQL API design patterns, error handling conventions, and input validation for backend development. Use it when designing, implementing, or reviewing backend API endpoints.

HNS OSS Docs Verify runs inlined read-only checks that gate documentation quality before returning to the orchestrator. It validates Hugo build warnings, sitemap existence, URL blacklist, Mermaid direction, 4-locale file and section parity, README heading parity, and body emoji usage.

MoAI Foundation Quality documents the TRUST 5 quality principles and how MoAI enforces them through agents, the 3-level harness, /moai gate, and sync-auditor scoring. Use it for code review, quality gate checks, coverage targets, or TRUST 5 compliance.

MoAI ADK Go Best Practices codifies quality gates, test isolation, hardcoding prevention, and agent-boundary rules for harness specialists. Use it when authoring or reviewing moai-adk-go code to enforce TRUST 5 quality gates and verification-claim integrity.

Agentlas Security Scan runs a two-stage security check on agent folders before private sync or public publish: a static rule scan and a BYOK LLM judgment for prompt injection, tool poisoning, secret exfiltration, destructive commands, and excessive permissions.

CLI Design provides design patterns and conventions for a consistent command-line interface. Use it when writing new CLI commands, reviewing CLI code, or fixing inconsistencies.

Code Quality performs deep code review and quality analysis for the vm0 project. It reviews commits, detects bad smells, and cleans up defensive code patterns.

Commit runs applicable pre-commit quality checks for the affected scope and validates or creates conventional commit messages before every commit.