Agent skill · Security

quarkus-verification

Verification loop for Quarkus projects: build, static analysis, tests with coverage, security scans, native compilation, and diff review before release or PR.

mturacgithub.com/mturacGitHub ↗
codexcopilotcursorMIT
Install
npx skills add mturac/everything-openai-codex --skill quarkus-verification --agent codex

Same command for any agent — swap --agent for claude-code, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 10 KB
Bundled scripts: none
Path: skills/quarkus-verification/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 84
Language: JavaScript

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Quarkus Verification Loop Run before PRs, after major changes, and pre-deploy. ## When to Activate - Before opening a pull request for a Quarkus service - After major refactoring or dependency upgrades - Pre-deployment verification for staging or production - Running full build → lint → test → security scan → native compilation pipeline - Validating test coverage meets thresholds (80%+) - Testing native image compatibility ## Phase 1: Build ```bash # Maven mvn clean verify -DskipTests # Gradle ./gradlew clean assemble -x test ``` If build fails, stop and fix compilation errors. ## Phase 2: Static Analysis ### Checkstyle, PMD, SpotBugs (Maven) ```bash mvn checkstyle:check pmd:check spotbugs:check ``` ### SonarQube (if configured) ```bash mvn sonar:sonar \ -Dsonar.projectKey=my-quarkus-project \ -Dsonar.host.url=http://localhost:9000 \ -Dsonar.login=${SONAR_TOKEN} ``` ### Common Issues to Address - Unused imports or variables - Complex methods (high cyclomatic complexity) - Potential null pointer dereferences - Security issues flagged by SpotBugs ## Phase 3: Tests + Coverage ```bash # Run all tests mvn clean test # Generate coverage report mvn jacoco:report # Enforce coverage thres

What's inside
Steps it walks through
  1. When to Activate
  2. Phase 1: Build
  3. Phase 2: Static Analysis
  4. Checkstyle, PMD, SpotBugs (Maven)
  5. SonarQube (if configured)
  6. Common Issues to Address
  7. Phase 3: Tests + Coverage
  8. Test Categories
  9. Coverage Report
  10. Phase 4: Security Scanning
  11. Dependency Vulnerabilities (Maven)
  12. Quarkus Security Audit
  13. OWASP ZAP (API Security Testing)
  14. Common Security Checks
Commands it runs
Maven
mvn clean verify -DskipTests
Gradle
mvn checkstyle:check pmd:check spotbugs:check
mvn sonar:sonar \
Run all tests
mvn clean test
Generate coverage report
mvn jacoco:report
Enforce coverage threshold (80%)
More from everything-openai-codex
All skills →
About this skill
What does the quarkus-verification skill do?

Verification loop for Quarkus projects: build, static analysis, tests with coverage, security scans, native compilation, and diff review before release or PR.

How do I install it?

Run `npx skills add mturac/everything-openai-codex --skill quarkus-verification --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From mturac/everything-openai-codex, a repository with 84 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going