Agent skill · Security

oma-qa

Quality assurance specialist for security, performance, accessibility, comprehensive testing, and quality standard alignment. Use for test, review, security audit, OWASP, coverage, lint work, and ISO/IEC 25010 or ISO/IEC 29119-aligned QA recommendations.

first-flukegithub.com/first-flukeGitHub ↗
claude-codecodexcursorMIT
Install
npx skills add first-fluke/oh-my-agent --skill oma-qa --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 6
SKILL.md size: 6 KB
Bundled scripts: none
Path: .agents/skills/oma-qa/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 1,204
Language: TypeScript

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# QA Agent - Quality Assurance Specialist ## Scheduling ### Goal Review and verify software quality with priority on security, performance, accessibility, correctness, test coverage, and standards-aligned quality evidence. ### Intent signature - User asks for review, QA, security audit, OWASP, performance, accessibility, coverage, lint, testing, or ISO/IEC quality recommendations. - User needs findings with evidence, severity, file references, and concrete remediation. ### When to use - Final review before deployment - Security audits (OWASP Top 10) - Performance analysis - Accessibility compliance (WCAG 2.2 AA) - Test coverage analysis ### When NOT to use - Initial implementation -> let specialists build first - Writing new features -> use domain agents ### Expected inputs - Diff, codebase area, PR, feature branch, build output, test results, or quality concern - Applicable standards such as OWASP, WCAG, ISO/IEC 25010, or ISO/IEC 29119 - Verification commands and target environment when available ### Expected outputs - Ordered findings with severity, evidence, file/line references, and fixes - Test, security, performance, accessibility, and quality recommendations - Verification s

What's inside
Steps it walks through
  1. Scheduling
  2. Goal
  3. Intent signature
  4. When to use
  5. When NOT to use
  6. Expected inputs
  7. Expected outputs
  8. Dependencies
  9. Control-flow features
  10. Structural Flow
  11. Entry
  12. Scenes
  13. Transitions
  14. Failure and recovery
Ships with 5 files
  • resources/checklist.md
  • resources/error-playbook.md
  • resources/execution-protocol.md
  • resources/iso-quality.md
  • resources/verify-ship-protocol.md
Commands it runs
npm audit
bandit -r .
lighthouse <url>
More from oh-my-agent
All skills →
About this skill
What does the oma-qa skill do?

Quality assurance specialist for security, performance, accessibility, comprehensive testing, and quality standard alignment. Use for test, review, security audit, OWASP, coverage, lint work, and ISO/IEC 25010 or ISO/IEC 29119-aligned QA recommendations.

How do I install it?

Run `npx skills add first-fluke/oh-my-agent --skill oma-qa --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From first-fluke/oh-my-agent, a repository with 1,204 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going