agentic-qe 3.8.1 → 3.8.3

package/.opencode/skills/qe-iterative-loop.yaml

@@ -0,0 +1,45 @@
+name: qe-iterative-loop
+description: "Quality Engineering iteration loops for autonomous test improvement, coverage achievement, and quality gate compliance. Use when tests need to pass, coverage targets must be met, quality gates require compliance, or flaky tests need stabilization. Integrates with AQE v3 fleet agents for coordinated "
+minModelTier: tier2-good
+tags: ["qe", "quality-engineering"]
+steps:
+  - name: overview
+    description: "QE Iterative Loop is a specialized adaptation of the Ralph Wiggum technique for **Quality Engineering workflows**. It enables autonomous, self-correcting quality cycles where AI agents iterate until quality objectives are achieved - tests pass, coverage targets met, quality gates satisfied, or flaky"
+    tools: ["bash", "read"]
+    prompt: |
+      QE Iterative Loop is a specialized adaptation of the Ralph Wiggum technique for **Quality Engineering workflows**. It enables autonomous, self-correcting quality cycles where AI agents iterate until quality objectives are achieved - tests pass, coverage targets met, quality gates satisfied, or flaky
+  - name: why-qe-benefits-from-iteration
+    description: "Quality Engineering has **objective, measurable success criteria**: - Tests either pass or fail (exit code 0 vs non-zero) - Coverage is quantifiable (78.5% vs 80% target) - Quality gates have binary outcomes (pass/fail) - Contract validation has clear schemas"
+    tools: ["bash", "read"]
+    prompt: |
+      Quality Engineering has **objective, measurable success criteria**: - Tests either pass or fail (exit code 0 vs non-zero) - Coverage is quantifiable (78.5% vs 80% target) - Quality gates have binary outcomes (pass/fail) - Contract validation has clear schemas
+  - name: pattern-1-test-fix-iteration
+    description: "Pattern 1: Test Fix Iteration"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      Pattern 1: Test Fix Iteration
+  - name: pattern-2-coverage-target-iteration
+    description: "Pattern 2: Coverage Target Iteration"
+    tools: ["bash", "read"]
+    prompt: |
+      Pattern 2: Coverage Target Iteration
+  - name: pattern-3-quality-gate-iteration
+    description: "Pattern 3: Quality Gate Iteration"
+    tools: ["bash", "read"]
+    prompt: |
+      Pattern 3: Quality Gate Iteration
+  - name: qe-iteration-patterns
+    description: "QE Iteration Patterns"
+    tools: ["bash", "read"]
+    prompt: |
+      QE Iteration Patterns
+  - name: pattern-1-test-fix-iteration-loop
+    description: "**Goal**: All tests pass"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      **Goal**: All tests pass
+  - name: qe-test-fix-loop
+    description: "QE Test-Fix Loop"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      QE Test-Fix Loop

package/.opencode/skills/qe-learning-optimization.yaml

@@ -0,0 +1,45 @@
+name: qe-learning-optimization
+description: "Transfer learning, metrics optimization, and continuous improvement for AI-powered QE agents."
+minModelTier: tier3-best
+tags: ["qe", "quality-engineering"]
+steps:
+  - name: agent-workflow
+    description: "Agent Workflow"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Agent Workflow
+  - name: learning-operations
+    description: "Learning Operations"
+    tools: ["bash", "read"]
+    prompt: |
+      Learning Operations
+  - name: 1-transfer-learning
+    description: "1. Transfer Learning"
+    tools: ["bash", "read"]
+    prompt: |
+      1. Transfer Learning
+  - name: 2-hyperparameter-tuning
+    description: "2. Hyperparameter Tuning"
+    tools: ["bash", "read"]
+    prompt: |
+      2. Hyperparameter Tuning
+  - name: 3-ab-testing
+    description: "3. A/B Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      3. A/B Testing
+  - name: 4-feedback-loop
+    description: "4. Feedback Loop"
+    tools: ["bash", "read"]
+    prompt: |
+      4. Feedback Loop
+  - name: learning-metrics-dashboard
+    description: "Learning Metrics Dashboard"
+    tools: ["bash", "read"]
+    prompt: |
+      Learning Metrics Dashboard
+  - name: cross-framework-transfer
+    description: "Cross-Framework Transfer"
+    tools: ["bash", "read"]
+    prompt: |
+      Cross-Framework Transfer

package/.opencode/skills/qe-localization-testing.yaml

@@ -0,0 +1,40 @@
+name: qe-localization-testing
+description: "Internationalization (i18n) and localization (l10n) testing for global products including translations, locale formats, RTL languages, and cultural appropriateness. Use when launching in new markets or building multi-language products."
+minModelTier: tier3-best
+tags: ["localization", "i18n", "l10n", "translation", "rtl", "unicode", "locale", "qe", "quality-engineering", "specialized-testing"]
+steps:
+  - name: i18n-vs-l10n
+    description: "i18n vs l10n"
+    tools: ["bash", "read"]
+    prompt: |
+      i18n vs l10n
+  - name: common-locale-formats
+    description: "Common Locale Formats"
+    tools: ["bash", "read"]
+    prompt: |
+      Common Locale Formats
+  - name: translation-coverage-testing
+    description: "Translation Coverage Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Translation Coverage Testing
+  - name: datetimecurrency-formats
+    description: "Date/Time/Currency Formats"
+    tools: ["bash", "read"]
+    prompt: |
+      Date/Time/Currency Formats
+  - name: rtl-right-to-left-testing
+    description: "RTL (Right-to-Left) Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      RTL (Right-to-Left) Testing
+  - name: unicode-character-support
+    description: "Unicode Character Support"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Unicode Character Support
+  - name: agent-driven-localization-testing
+    description: "Agent-Driven Localization Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Agent-Driven Localization Testing

package/.opencode/skills/qe-middleware-testing-patterns.yaml

@@ -0,0 +1,45 @@
+name: qe-middleware-testing-patterns
+description: "Enterprise middleware testing patterns for message routing, transformation, DLQ, protocol mediation, ESB error handling, and EIP patterns. Use when testing middleware layers, message brokers, ESBs, or integration buses."
+minModelTier: tier3-best
+tags: ["middleware", "esb", "soap", "messaging", "iib", "mq", "transformation", "routing", "qe", "quality-engineering", "enterprise-integration"]
+steps:
+  - name: testing-levels
+    description: "Testing Levels"
+    tools: ["bash", "read"]
+    prompt: |
+      Testing Levels
+  - name: critical-test-scenarios
+    description: "Critical Test Scenarios"
+    tools: ["bash", "read"]
+    prompt: |
+      Critical Test Scenarios
+  - name: message-routing-pattern-testing
+    description: "Message Routing Pattern Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Message Routing Pattern Testing
+  - name: content-based-router
+    description: "Content-Based Router"
+    tools: ["bash", "read"]
+    prompt: |
+      Content-Based Router
+  - name: header-based-router
+    description: "Header-Based Router"
+    tools: ["bash", "read"]
+    prompt: |
+      Header-Based Router
+  - name: recipient-list
+    description: "Recipient List"
+    tools: ["bash", "read"]
+    prompt: |
+      Recipient List
+  - name: message-transformation-testing
+    description: "Message Transformation Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Message Transformation Testing
+  - name: json-to-xml-transformation
+    description: "JSON-to-XML Transformation"
+    tools: ["bash", "read"]
+    prompt: |
+      JSON-to-XML Transformation

package/.opencode/skills/qe-mobile-testing.yaml

@@ -0,0 +1,35 @@
+name: qe-mobile-testing
+description: "Comprehensive mobile testing for iOS and Android platforms including gestures, sensors, permissions, device fragmentation, and performance. Use when testing native apps, hybrid apps, or mobile web, ensuring quality across 1000+ device variants."
+minModelTier: tier3-best
+tags: ["mobile", "ios", "android", "appium", "gestures", "device-fragmentation", "sensors", "qe", "quality-engineering", "specialized-testing"]
+steps:
+  - name: ios-vs-android-differences
+    description: "iOS vs Android Differences"
+    tools: ["bash", "read"]
+    prompt: |
+      iOS vs Android Differences
+  - name: device-coverage-tiers
+    description: "Device Coverage Tiers"
+    tools: ["bash", "read"]
+    prompt: |
+      Device Coverage Tiers
+  - name: mobile-performance-goals
+    description: "Mobile Performance Goals"
+    tools: ["bash", "read"]
+    prompt: |
+      Mobile Performance Goals
+  - name: touch-gesture-testing
+    description: "Touch Gesture Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Touch Gesture Testing
+  - name: mobile-specific-scenarios
+    description: "Mobile-Specific Scenarios"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Mobile-Specific Scenarios
+  - name: agent-driven-mobile-testing
+    description: "Agent-Driven Mobile Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Agent-Driven Mobile Testing

package/.opencode/skills/qe-mutation-testing.yaml

@@ -0,0 +1,35 @@
+name: qe-mutation-testing
+description: "Test quality validation through mutation testing, assessing test suite effectiveness by introducing code mutations and measuring kill rate. Use when evaluating test quality, identifying weak tests, or proving tests actually catch bugs."
+minModelTier: tier3-best
+tags: ["mutation", "stryker", "test-quality", "kill-rate", "assertions", "effectiveness", "qe", "quality-engineering", "specialized-testing"]
+steps:
+  - name: mutation-score-interpretation
+    description: "Mutation Score Interpretation"
+    tools: ["bash", "read"]
+    prompt: |
+      Mutation Score Interpretation
+  - name: common-mutation-operators
+    description: "Common Mutation Operators"
+    tools: ["bash", "read"]
+    prompt: |
+      Common Mutation Operators
+  - name: how-mutation-testing-works
+    description: "How Mutation Testing Works"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      How Mutation Testing Works
+  - name: using-stryker
+    description: "Using Stryker"
+    tools: ["bash", "read"]
+    prompt: |
+      Using Stryker
+  - name: fixing-surviving-mutants
+    description: "Fixing Surviving Mutants"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      Fixing Surviving Mutants
+  - name: agent-driven-mutation-testing
+    description: "Agent-Driven Mutation Testing"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      Agent-Driven Mutation Testing

package/.opencode/skills/qe-n8n-expression-testing.yaml

@@ -0,0 +1,45 @@
+name: qe-n8n-expression-testing
+description: "n8n expression syntax validation, context-aware testing, common pitfalls detection, and performance optimization. Use when validating n8n expressions and data transformations."
+minModelTier: tier3-best
+tags: ["n8n", "expressions", "javascript", "data-transformation", "validation", "qe", "quality-engineering", "n8n-testing"]
+steps:
+  - name: n8n-expression-syntax
+    description: "n8n Expression Syntax"
+    tools: ["bash", "read"]
+    prompt: |
+      n8n Expression Syntax
+  - name: context-variables
+    description: "Context Variables"
+    tools: ["bash", "read"]
+    prompt: |
+      Context Variables
+  - name: expression-syntax-patterns
+    description: "Expression Syntax Patterns"
+    tools: ["bash", "read"]
+    prompt: |
+      Expression Syntax Patterns
+  - name: safe-data-access
+    description: "Safe Data Access"
+    tools: ["bash", "read"]
+    prompt: |
+      Safe Data Access
+  - name: type-conversions
+    description: "Type Conversions"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      Type Conversions
+  - name: string-operations
+    description: "String Operations"
+    tools: ["bash", "read"]
+    prompt: |
+      String Operations
+  - name: array-operations
+    description: "Array Operations"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Array Operations
+  - name: validation-patterns
+    description: "Validation Patterns"
+    tools: ["bash", "read", "edit", "grep"]
+    prompt: |
+      Validation Patterns

package/.opencode/skills/qe-n8n-integration-testing-patterns.yaml

@@ -0,0 +1,45 @@
+name: qe-n8n-integration-testing-patterns
+description: "API contract testing, authentication flows, rate limit handling, and error scenario coverage for n8n integrations with external services. Use when testing n8n node integrations."
+minModelTier: tier3-best
+tags: ["n8n", "integration", "api", "authentication", "oauth", "rate-limiting", "testing", "qe", "quality-engineering", "n8n-testing"]
+steps:
+  - name: common-n8n-integrations
+    description: "Common n8n Integrations"
+    tools: ["bash", "read"]
+    prompt: |
+      Common n8n Integrations
+  - name: authentication-types
+    description: "Authentication Types"
+    tools: ["bash", "read"]
+    prompt: |
+      Authentication Types
+  - name: connectivity-testing
+    description: "Connectivity Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Connectivity Testing
+  - name: api-operation-testing
+    description: "API Operation Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      API Operation Testing
+  - name: authentication-testing
+    description: "Authentication Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Authentication Testing
+  - name: oauth2-flow-testing
+    description: "OAuth2 Flow Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      OAuth2 Flow Testing
+  - name: api-key-testing
+    description: "API Key Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      API Key Testing
+  - name: rate-limit-testing
+    description: "Rate Limit Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Rate Limit Testing

package/.opencode/skills/qe-n8n-security-testing.yaml

@@ -0,0 +1,45 @@
+name: qe-n8n-security-testing
+description: "Credential exposure detection, OAuth flow validation, API key management testing, and data sanitization verification for n8n workflows. Use when validating n8n workflow security."
+minModelTier: tier3-best
+tags: ["n8n", "security", "credentials", "oauth", "api-keys", "encryption", "testing", "qe", "quality-engineering", "n8n-testing"]
+steps:
+  - name: security-risk-areas
+    description: "Security Risk Areas"
+    tools: ["bash", "read"]
+    prompt: |
+      Security Risk Areas
+  - name: credential-types
+    description: "Credential Types"
+    tools: ["bash", "read"]
+    prompt: |
+      Credential Types
+  - name: credential-security-testing
+    description: "Credential Security Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Credential Security Testing
+  - name: scan-for-exposed-credentials
+    description: "Scan for Exposed Credentials"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Scan for Exposed Credentials
+  - name: verify-credential-encryption
+    description: "Verify Credential Encryption"
+    tools: ["bash", "read"]
+    prompt: |
+      Verify Credential Encryption
+  - name: test-credential-rotation
+    description: "Test Credential Rotation"
+    tools: ["bash", "read"]
+    prompt: |
+      Test Credential Rotation
+  - name: webhook-security-testing
+    description: "Webhook Security Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Webhook Security Testing
+  - name: authentication-testing
+    description: "Authentication Testing"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Authentication Testing

package/.opencode/skills/qe-n8n-trigger-testing-strategies.yaml

@@ -0,0 +1,45 @@
+name: qe-n8n-trigger-testing-strategies
+description: "Webhook testing, schedule validation, event-driven triggers, and polling mechanism testing for n8n workflows. Use when testing how workflows are triggered."
+minModelTier: tier3-best
+tags: ["n8n", "triggers", "webhook", "schedule", "cron", "polling", "testing", "qe", "quality-engineering", "n8n-testing"]
+steps:
+  - name: n8n-trigger-types
+    description: "n8n Trigger Types"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      n8n Trigger Types
+  - name: common-webhook-configurations
+    description: "Common Webhook Configurations"
+    tools: ["bash", "read"]
+    prompt: |
+      Common Webhook Configurations
+  - name: webhook-testing
+    description: "Webhook Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Webhook Testing
+  - name: basic-webhook-test
+    description: "Basic Webhook Test"
+    tools: ["bash", "read"]
+    prompt: |
+      Basic Webhook Test
+  - name: http-method-testing
+    description: "HTTP Method Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      HTTP Method Testing
+  - name: authentication-testing
+    description: "Authentication Testing"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Authentication Testing
+  - name: schedule-testing
+    description: "Schedule Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Schedule Testing
+  - name: cron-expression-validation
+    description: "Cron Expression Validation"
+    tools: ["bash", "read"]
+    prompt: |
+      Cron Expression Validation

package/.opencode/skills/qe-n8n-workflow-testing-fundamentals.yaml

@@ -0,0 +1,45 @@
+name: qe-n8n-workflow-testing-fundamentals
+description: "Comprehensive n8n workflow testing including execution lifecycle, node connection patterns, data flow validation, and error handling strategies. Use when testing n8n workflow automation applications."
+minModelTier: tier3-best
+tags: ["n8n", "workflow", "automation", "testing", "data-flow", "nodes", "triggers", "qe", "quality-engineering", "n8n-testing"]
+steps:
+  - name: n8n-workflow-components
+    description: "n8n Workflow Components"
+    tools: ["bash", "read"]
+    prompt: |
+      n8n Workflow Components
+  - name: workflow-execution-states
+    description: "Workflow Execution States"
+    tools: ["bash", "read"]
+    prompt: |
+      Workflow Execution States
+  - name: workflow-structure-validation
+    description: "Workflow Structure Validation"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Workflow Structure Validation
+  - name: execution-testing
+    description: "Execution Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Execution Testing
+  - name: data-flow-validation
+    description: "Data Flow Validation"
+    tools: ["bash", "read"]
+    prompt: |
+      Data Flow Validation
+  - name: error-handling-testing
+    description: "Error Handling Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Error Handling Testing
+  - name: node-connection-patterns
+    description: "Node Connection Patterns"
+    tools: ["bash", "read"]
+    prompt: |
+      Node Connection Patterns
+  - name: linear-flow
+    description: "Linear Flow"
+    tools: ["bash", "read"]
+    prompt: |
+      Linear Flow

package/.opencode/skills/qe-observability-testing-patterns.yaml

@@ -0,0 +1,45 @@
+name: qe-observability-testing-patterns
+description: "Observability and monitoring validation patterns for dashboards, alerting, log aggregation, APM traces, and SLA/SLO verification. Use when testing monitoring infrastructure, dashboard accuracy, alert rules, or metric pipelines."
+minModelTier: tier3-best
+tags: ["observability", "monitoring", "kibana", "elasticsearch", "dashboards", "alerting", "metrics", "logging", "qe", "quality-engineering", "specialized-testing"]
+steps:
+  - name: testing-levels
+    description: "Testing Levels"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Testing Levels
+  - name: critical-test-scenarios
+    description: "Critical Test Scenarios"
+    tools: ["bash", "read"]
+    prompt: |
+      Critical Test Scenarios
+  - name: dashboard-data-accuracy-validation
+    description: "Dashboard Data Accuracy Validation"
+    tools: ["bash", "read"]
+    prompt: |
+      Dashboard Data Accuracy Validation
+  - name: compare-source-data-to-dashboard
+    description: "Compare Source Data to Dashboard"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Compare Source Data to Dashboard
+  - name: elasticsearch-query-result-validation
+    description: "Elasticsearch Query Result Validation"
+    tools: ["bash", "read", "edit", "grep"]
+    prompt: |
+      Elasticsearch Query Result Validation
+  - name: kibana-dashboard-element-assertions
+    description: "Kibana Dashboard Element Assertions"
+    tools: ["bash", "read"]
+    prompt: |
+      Kibana Dashboard Element Assertions
+  - name: alert-rule-testing
+    description: "Alert Rule Testing"
+    tools: ["bash", "read"]
+    prompt: |
+      Alert Rule Testing
+  - name: log-aggregation-completeness
+    description: "Log Aggregation Completeness"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Log Aggregation Completeness

package/.opencode/skills/qe-pair-programming.yaml

@@ -0,0 +1,45 @@
+name: qe-pair-programming
+description: "AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Supports TDD, debugging, refactoring, and learning sessions. Features automatic role switching, continuous code review, security scanning, and performanc"
+minModelTier: tier2-good
+tags: ["qe", "quality-engineering"]
+steps:
+  - name: what-this-skill-does
+    description: "This skill provides professional pair programming capabilities with AI assistance, supporting multiple collaboration modes, continuous verification, and integrated testing. It manages driver/navigator roles, performs real-time code review, tracks quality metrics, and ensures high standards through t"
+    tools: ["bash", "read"]
+    prompt: |
+      This skill provides professional pair programming capabilities with AI assistance, supporting multiple collaboration modes, continuous verification, and integrated testing. It manages driver/navigator roles, performs real-time code review, tracks quality metrics, and ensures high standards through t
+  - name: basic-session
+    description: "Basic Session"
+    tools: ["bash", "read"]
+    prompt: |
+      Basic Session
+  - name: tdd-session
+    description: "TDD Session"
+    tools: ["bash", "read"]
+    prompt: |
+      TDD Session
+  - name: complete-guide
+    description: "Complete Guide"
+    tools: ["bash", "read"]
+    prompt: |
+      Complete Guide
+  - name: session-control-commands
+    description: "Session Control Commands"
+    tools: ["bash", "read"]
+    prompt: |
+      Session Control Commands
+  - name: available-modes
+    description: "Available Modes"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      Available Modes
+  - name: in-session-commands
+    description: "In-Session Commands"
+    tools: ["bash", "read", "edit", "grep", "mcp:agentic-qe:*"]
+    prompt: |
+      In-Session Commands
+  - name: command-shortcuts
+    description: "Command Shortcuts"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      Command Shortcuts

package/.opencode/skills/qe-pentest-validation.yaml

@@ -0,0 +1,45 @@
+name: qe-pentest-validation
+description: "Orchestrate security finding validation through graduated exploitation. 4-phase pipeline: recon (SAST/DAST), analysis (code review), validation (exploit proof), report (No Exploit, No Report gate). Eliminates false positives by proving exploitability."
+minModelTier: tier3-best
+tags: ["pentest", "exploitation", "security-validation", "shannon", "no-exploit-no-report", "graduated-exploitation", "qe", "quality-engineering", "specialized-testing"]
+steps:
+  - name: the-4-phase-pipeline
+    description: "The 4-Phase Pipeline"
+    tools: ["bash", "read"]
+    prompt: |
+      The 4-Phase Pipeline
+  - name: graduated-exploitation-tiers
+    description: "Graduated Exploitation Tiers"
+    tools: ["bash", "read"]
+    prompt: |
+      Graduated Exploitation Tiers
+  - name: configuration
+    description: "Configuration"
+    tools: ["bash", "read"]
+    prompt: |
+      Configuration
+  - name: safeguards-mandatory
+    description: "Safeguards (Mandatory)"
+    tools: ["bash", "read"]
+    prompt: |
+      Safeguards (Mandatory)
+  - name: authorization-gate
+    description: "Every pentest validation run MUST: 1. Display target URL and exploitation tier to user 2. Require explicit confirmation: \"I own/authorized testing of this target\" 3. Log authorization with timestamp 4. Block if target URL matches production patterns"
+    tools: ["bash", "read"]
+    prompt: |
+      Every pentest validation run MUST: 1. Display target URL and exploitation tier to user 2. Require explicit confirmation: "I own/authorized testing of this target" 3. Log authorization with timestamp 4. Block if target URL matches production patterns
+  - name: what-this-skill-does-not-do
+    description: "- Full autonomous reconnaissance (Nmap, Subfinder) - Zero-day exploit development - Attack targets without explicit authorization - Test production systems - Store actual exfiltrated data (only proof of access) - Social engineering or phishing simulation - Port scanning or service discovery"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      - Full autonomous reconnaissance (Nmap, Subfinder) - Zero-day exploit development - Attack targets without explicit authorization - Test production systems - Store actual exfiltrated data (only proof of access) - Social engineering or phishing simulation - Port scanning or service discovery
+  - name: validation-pipelines
+    description: "Validation Pipelines"
+    tools: ["bash", "read"]
+    prompt: |
+      Validation Pipelines
+  - name: injection-pipeline
+    description: "Injection Pipeline"
+    tools: ["bash", "read"]
+    prompt: |
+      Injection Pipeline

package/.opencode/skills/qe-performance-analysis.yaml

@@ -0,0 +1,45 @@
+name: qe-performance-analysis
+description: "Comprehensive performance analysis, bottleneck detection, and optimization recommendations for Claude Flow swarms"
+minModelTier: tier3-best
+tags: ["performance", "bottleneck", "optimization", "profiling", "metrics", "analysis", "qe", "quality-engineering", "monitoring"]
+steps:
+  - name: overview
+    description: "This skill consolidates all performance analysis capabilities: - **Bottleneck Detection**: Identify performance bottlenecks across communication, processing, memory, and network - **Performance Profiling**: Real-time monitoring and historical analysis of swarm operations - **Report Generation**: Cre"
+    tools: ["bash", "read", "mcp:agentic-qe:*"]
+    prompt: |
+      This skill consolidates all performance analysis capabilities: - **Bottleneck Detection**: Identify performance bottlenecks across communication, processing, memory, and network - **Performance Profiling**: Real-time monitoring and historical analysis of swarm operations - **Report Generation**: Cre
+  - name: basic-bottleneck-detection
+    description: "Basic Bottleneck Detection"
+    tools: ["bash", "read"]
+    prompt: |
+      Basic Bottleneck Detection
+  - name: generate-performance-report
+    description: "Generate Performance Report"
+    tools: ["bash", "read"]
+    prompt: |
+      Generate Performance Report
+  - name: analyze-and-auto-fix
+    description: "Analyze and Auto-Fix"
+    tools: ["bash", "read", "edit"]
+    prompt: |
+      Analyze and Auto-Fix
+  - name: core-capabilities
+    description: "Core Capabilities"
+    tools: ["bash", "read"]
+    prompt: |
+      Core Capabilities
+  - name: 1-bottleneck-detection
+    description: "1. Bottleneck Detection"
+    tools: ["bash", "read", "edit", "mcp:agentic-qe:*"]
+    prompt: |
+      1. Bottleneck Detection
+  - name: 2-performance-profiling
+    description: "2. Performance Profiling"
+    tools: ["bash", "read", "edit", "mcp:agentic-qe:*"]
+    prompt: |
+      2. Performance Profiling
+  - name: 3-report-generation
+    description: "3. Report Generation"
+    tools: ["bash", "read", "grep"]
+    prompt: |
+      3. Report Generation