ai-developer-skill-os 7.5.0 → 8.1.4

package/.agents/skills/qk-security-audit/SKILL.md

@@ -0,0 +1,135 @@
+---
+# ── Identity ───────────────────────────────────────────────
+name: qk-security-audit
+version: 8.1.0
+status: experimental
+description: "Security audit (OWASP, dependency security, secret detection, permission model)."
+platforms: [antigravity, claude-code, cursor, windsurf, kilo-code]
+
+# ── V8: Classification ─────────────────────────────────────
+type: capability
+
+intent:
+  - security-audit
+  - vulnerability-scan
+  - secret-detection
+  - permission-review
+
+complexity:
+  level: high
+  criteria:
+    files_affected: "1-10"
+    has_behavior_change: true
+    has_external_dependency: true
+    has_breaking_change: false
+
+triggers:
+  - "kiểm tra bảo mật"
+  - "scan lỗ hổng"
+  - "audit code"
+  - "tìm secret leak"
+
+# ── V8: References ─────────────────────────────────────────
+workflow: security-audit
+
+rules:
+  - global
+  - security
+
+tools:
+  - filesystem
+  - terminal
+
+related_skills:
+  - qk-access-policy
+
+knowledge_scope:
+  domain:
+    - security-practices
+    - vulnerability-detection
+  concepts:
+    - owasp
+    - secret-detection
+  references:
+    - architecture
+
+decision_boundary:
+  owns:
+    - application-security
+    - agent-security
+    - prompt-injection
+    - dependency-risk
+  does_not_own:
+    - access control implementation
+    - penetration testing
+    - compliance certification
+  conflicts_with: []
+  delegates_to:
+    - qk-validation-gate
+
+# ── V8: Verification ───────────────────────────────────────
+verification:
+  required: true
+  strategy: feature
+
+lifecycle:
+  promotion_gate:
+    requirements:
+      tests:
+        minimum_pass_rate: 0.95
+      usage:
+        minimum_runs: 20
+      conflicts:
+        zero_boundary_violation: true
+      evidence:
+        required:
+          - evaluation_report
+          - usage_history
+          - boundary_audit
+  demotion_gate:
+    triggers:
+      - repeated_failure
+      - boundary_violation
+      - outdated_reference
+    action:
+      change_status: "stable -> experimental"
+
+selection:
+  priority: high
+  confidence_threshold: 0.85
+
+examples: []
+learnings: []
+
+# ── V7 Runtime ─────────────────────────────────────────────
+execution_mode: deterministic
+cost: medium
+latency: slow
+risk: low
+side_effects: read_only
+produces: [report, security_fixes]
+consumes: [user-description]
+
+token_budget:
+  max_files_read: 10
+  max_lines_per_read: 150
+  max_shell_commands: 2
+  stop_early: false
+
+exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
+---
+
+# qk-security-audit — Security Auditor
+
+> **Language rule:** Code, identifiers, file names → English. Explanations, summaries → Vietnamese.
+
+## Preconditions
+- [ ] Tuân thủ `security.md`.
+- [ ] Xác định phạm vi codebase cần audit.
+
+## Scope
+- Quét và phát hiện các rủi ro bảo mật từ dependencies bên thứ ba.
+- Nhận diện secret bị hardcode/leak (API keys, passwords, tokens).
+- Rà soát mô hình phân quyền (RBAC, ABAC) và kiểm tra lỗ hổng logic (BOLA, Broken Auth).
+- Check dựa trên OWASP Top 10.
+- Khuyến nghị bản vá bảo mật tương ứng.

package/.agents/skills/qk-system-evolution/SKILL.md

@@ -1,11 +1,70 @@
 ---
+# ── Identity ───────────────────────────────────────────────
 name: qk-system-evolution
-category: maintenance
-version: 7.5.0
+version: 8.0.0
+status: stable
 description: "Nâng cấp thư viện/framework an toàn với rollback plan bắt buộc — incremental, không big-bang."
 platforms: [antigravity, claude-code, cursor, windsurf, kilo-code]
-execution_mode: deterministic
 
+# ── V8: Classification ─────────────────────────────────────
+type: capability
+
+intent:
+  - framework-upgrade
+  - system-maintenance
+
+complexity:
+  level: high
+  criteria:
+    files_affected: "10+"
+    has_behavior_change: false
+    has_external_dependency: true
+    has_breaking_change: true
+
+triggers:
+  - "upgrade package"
+  - "nâng cấp"
+  - "update framework"
+  - "migration framework"
+  - "system evolution"
+
+# ── V8: References ─────────────────────────────────────────
+workflow: refactor
+
+rules:
+  - global
+  - coding
+
+tools:
+  - filesystem
+  - terminal
+
+related_skills:
+  - qk-engineering-standard
+  - qk-project-health
+
+knowledge_scope:
+  owns:
+    - upgrade-strategy
+    - rollback-plan
+  references:
+    - testing
+    - architecture
+
+# ── V8: Verification ───────────────────────────────────────
+verification:
+  required: true
+  strategy: refactor
+
+selection:
+  priority: medium
+  confidence_threshold: 0.85
+
+examples: []
+learnings: []
+
+# ── V7 Runtime ─────────────────────────────────────────────
+execution_mode: deterministic
 cost: high
 latency: slow
 risk: high
@@ -20,19 +79,11 @@ token_budget:
   stop_early: false
 
 exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
 ---
 
 # qk-system-evolution — Safe Upgrade Manager
 
-> **Language rule:** Code, identifiers, file names ? English. Explanations, summaries ? Vietnamese.
-
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
----
+> **Language rule:** Code, identifiers, file names → English. Explanations, summaries → Vietnamese.
 
 ## Preconditions
 - [ ] Current version and target version are specified

package/.agents/skills/qk-test-engineering/SKILL.md

@@ -0,0 +1,139 @@
+---
+# ── Identity ───────────────────────────────────────────────
+name: qk-test-engineering
+version: 8.1.0
+status: experimental
+description: "Công cụ quyết định chiến lược kiểm thử (Unit, Integration, E2E, Coverage, Regression, Mock)."
+platforms: [antigravity, claude-code, cursor, windsurf, kilo-code]
+
+# ── V8: Classification ─────────────────────────────────────
+type: capability
+
+intent:
+  - testing-strategy
+  - unit-test
+  - integration-test
+  - e2e-test
+  - mock-strategy
+  - test-coverage
+
+complexity:
+  level: high
+  criteria:
+    files_affected: "1-5"
+    has_behavior_change: true
+    has_external_dependency: true
+    has_breaking_change: false
+
+triggers:
+  - "chiến lược test"
+  - "viết test"
+  - "mock data"
+  - "test coverage"
+
+# ── V8: References ─────────────────────────────────────────
+workflow: feature-delivery
+
+rules:
+  - global
+  - coding
+
+tools:
+  - filesystem
+  - terminal
+
+related_skills:
+  - qk-engineering-standard
+
+knowledge_scope:
+  domain:
+    - testing-strategy
+    - quality-assurance
+    - unit-testing
+    - integration-testing
+    - e2e-testing
+    - visual-regression
+  concepts:
+    - test-pyramid
+    - mock-strategy
+  references:
+    - architecture
+    - playwright
+    - vitest
+    - storybook-testing
+
+decision_boundary:
+  owns:
+    - test pyramid
+    - coverage strategy
+    - regression planning
+  does_not_own:
+    - business logic implementation
+    - writing tests
+  conflicts_with: []
+
+# ── V8: Verification ───────────────────────────────────────
+verification:
+  required: true
+  strategy: feature
+
+lifecycle:
+  promotion_gate:
+    requirements:
+      tests:
+        minimum_pass_rate: 0.95
+      usage:
+        minimum_runs: 20
+      conflicts:
+        zero_boundary_violation: true
+      evidence:
+        required:
+          - evaluation_report
+          - usage_history
+          - boundary_audit
+  demotion_gate:
+    triggers:
+      - repeated_failure
+      - boundary_violation
+      - outdated_reference
+    action:
+      change_status: "stable -> experimental"
+
+selection:
+  priority: medium
+  confidence_threshold: 0.80
+
+examples: []
+learnings: []
+
+# ── V7 Runtime ─────────────────────────────────────────────
+execution_mode: deterministic
+cost: medium
+latency: medium
+risk: low
+side_effects: read_only
+produces: [report, test_plan]
+consumes: [user-description]
+
+token_budget:
+  max_files_read: 5
+  max_lines_per_read: 150
+  max_shell_commands: 0
+  stop_early: false
+
+exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
+---
+
+# qk-test-engineering — Test Engineering Strategist
+
+> **Language rule:** Code, identifiers, file names → English. Explanations, summaries → Vietnamese.
+
+## Preconditions
+- [ ] Có code hoặc requirement rõ ràng cần kiểm thử.
+
+## Scope
+- Đưa ra quyết định chọn loại test (Unit, Integration, E2E) theo Test Pyramid.
+- Thiết kế chiến lược Mock (Mocking vs Stubbing vs Faking).
+- Đánh giá Test Coverage hiện tại và đưa ra target.
+- Quyết định Regression analysis (những phần nào cần test lại khi file A thay đổi).
+- Không tự động sinh test trừ khi user yêu cầu implement, skill này chủ yếu tư vấn architecture và strategy cho QA/Testing.

package/.agents/skills/qk-ui-audit/SKILL.md

@@ -1,11 +1,68 @@
 ---
+# ── Identity ───────────────────────────────────────────────
 name: qk-ui-audit
-category: qa
-version: 7.5.0
+version: 8.0.0
+status: stable
 description: "Kiểm toán giao diện (UI) với 57-point Anti-Slop checklist — fail nếu score < 90/100."
 platforms: [antigravity, claude-code, cursor, windsurf, kilo-code]
-execution_mode: deterministic
 
+# ── V8: Classification ─────────────────────────────────────
+type: utility
+
+intent:
+  - ui-audit
+  - codebase-health
+
+complexity:
+  level: medium
+  criteria:
+    files_affected: "1-5"
+    has_behavior_change: false
+    has_external_dependency: false
+    has_breaking_change: false
+
+triggers:
+  - "audit ui"
+  - "check ui"
+  - "kiểm tra giao diện"
+  - "ui slop"
+  - "review ui"
+
+# ── V8: References ─────────────────────────────────────────
+workflow: code-review
+
+rules:
+  - global
+  - coding
+
+tools:
+  - filesystem
+  - terminal
+
+related_skills:
+  - qk-ui-builder
+
+knowledge_scope:
+  owns:
+    - ui-standards
+    - anti-slop
+  references:
+    - design-system
+
+# ── V8: Verification ───────────────────────────────────────
+verification:
+  required: true
+  strategy: review
+
+selection:
+  priority: medium
+  confidence_threshold: 0.80
+
+examples: []
+learnings: []
+
+# ── V7 Runtime ─────────────────────────────────────────────
+execution_mode: deterministic
 cost: medium
 latency: medium
 risk: low
@@ -20,9 +77,6 @@ token_budget:
   stop_early: true
 
 exit_codes: [SUCCESS, BLOCKED, FAILED, PARTIAL]
-skill_version: 7.5.0
-runtime_version: 1
-schema_version: 2
 ---
 
 # qk-ui-audit — Anti-Slop UI Inspector
@@ -56,7 +110,7 @@ schema_version: 2
 - ✅ Validate responsive, interactive, and animation states
 
 ## Non-Goals
-- ❌ Fix the UI — only audit and report (fixes go to qk-design-to-code)
+- ❌ Fix the UI — only audit and report (fixes go to qk-ui-builder)
 - ❌ Pixel-level screenshot comparison
 - ❌ Read entire CSS files — use targeted reads
 
@@ -248,7 +302,7 @@ schema_version: 2
 ### Produces
 ```json
 {
-  "to": "qk-design-to-code (if fixes needed)",
+  "to": "qk-ui-builder (if fixes needed)",
   "output_fields": ["audit_score", "violations_list", "top_3_fixes", "exit_code"]
 }
 ```
@@ -312,3 +366,4 @@ schema_version: 2
 
 ---
 
+