How do I install the Quality skill?

Run npx skillmds@latest add hashgraph-online-awesome-codex-plugins/quality in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Quality safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Quality?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Quality free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Quality?

hashgraph-online (@hashgraph-online-awesome-codex-plugins) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Quality by hashgraph-online-awesome-codex-plugins

Name: Quality
Rating: 4.2 (5 reviews)
Author: hashgraph-online

File contents

2. Empty catch blocks

grep -r "catch.{}" --include=".ts" --include="*.js" | head -5

3. String concat in queries (SQL injection)

grep -rE "SELECT.${|INSERT.${" --include=".ts" --include=".js" | head -5

</quick_checks>

<data_correctness>
For any pipeline that extracts or transforms figures (financial, metrics, counts):
- Parse deterministically (a real parser, regex, typed loader). The LLM never
  generates, transforms, or "fixes" numeric values.
- Units are explicit at parse time (percent vs fraction, counts vs currency);
  a value never crosses unit categories through arithmetic.
- Tie-out gate: derived aggregates must reproduce the source's own totals before
  any output is shown downstream. A delta between your output and the source is
  assumed to be YOUR normalization bug until proven otherwise.
- Silent-empty guard: "no findings" produced from an empty parse is a failure of
  the parse, not a finding.
</data_correctness>

<verdict>
Any Big 5 violation = NOT READY
Fix before commit. No exceptions.
</verdict>


<on_complete>
agentdb write-end '{"skill":"quality","big5_checked":true,"violations":N}'
</on_complete>

</skill>

---name: qualitydescription: AI code quality checks. The Big 5: input validation, edge cases, error handling, duplication, complexity. Triggers: quality, big 5, ai code, review, validate.---<skill id="quality"><purpose>AI code is 1.7x buggier. These 5 checks catch 80% of issues.Load this skill for any review, validation, or implementation work.</purpose><reference>Verbose research: skills/quality/reference/quality-research.md</reference><big5><check id="1" name="input_validation" detection="grep -r 'req\.body' | grep -v 'parse\|validate\|z\.'">Every endpoint has Zod/Pydantic schema. Parameterized queries only.</check><check id="2" name="edge_cases" detection="search for array access without length check">Handle: null, empty array, zero-length string, timeout, unicode.</check><check id="3" name="error_handling" detection="grep -r 'catch.*{}'">No empty catch. Errors logged with context. User messages generic.Silent swallowing is the worst variant: a catch/onError that returns a masked orgeneric body without first logging method/path/cause hides the root failure behinda 500 and costs a full re-diagnosis per incident. Every handler logs the causebefore it masks. Missing config/dependency is a NAMED condition in the response(which var, which service), never a generic error.</check><check id="4" name="duplication" detection="jscpd or manual review">Same logic in 3+ places = extract to utility.</check><check id="5" name="complexity" detection="eslint complexity rule">Functions under 30 lines. No nested ternaries > 2 levels.</check></big5><quick_checks>```bash# 1. Missing validationgrep -r "req\.body" --include="*.ts" --include="*.js" | grep -v "parse\|validate\|z\." | head -5# 2. Empty catch blocksgrep -r "catch.*{}" --include="*.ts" --include="*.js" | head -5# 3. String concat in queries (SQL injection)grep -rE "SELECT.*\$\{|INSERT.*\$\{" --include="*.ts" --include="*.js" | head -5```</quick_checks><data_correctness>For any pipeline that extracts or transforms figures (financial, metrics, counts):- Parse deterministically (a real parser, regex, typed loader). The LLM never generates, transforms, or "fixes" numeric values.- Units are explicit at parse time (percent vs fraction, counts vs currency); a value never crosses unit categories through arithmetic.- Tie-out gate: derived aggregates must reproduce the source's own totals before any output is shown downstream. A delta between your output and the source is assumed to be YOUR normalization bug until proven otherwise.- Silent-empty guard: "no findings" produced from an empty parse is a failure of the parse, not a finding.</data_correctness><verdict>Any Big 5 violation = NOT READYFix before commit. No exceptions.</verdict><on_complete>agentdb write-end '{"skill":"quality","big5_checked":true,"violations":N}'</on_complete></skill>

Frequently asked questions

Quality