Quality-Max
- 27 skills
- 0 followers
- 4 hours ago last updated
- ▌ SEO Check · quality-maxQuick SEO health check of any URL. Checks meta tags, headings, image alts, structured data, open graph, and common SEO issues. Uses Playwright MCP only — no signup.
- ▌ UI UX Scan · quality-maxQuick UI/UX deficiency scan of any page. Checks touch targets, contrast, font consistency, spacing issues, empty states, loading indicators, and common UX anti-patterns. Uses Playwright MCP only — no signup.
- ▌ Secret Scan · quality-maxScan the working tree or git diff for hardcoded secrets — API keys, tokens, private keys, connection strings, cloud credentials — across common providers. Reports file:line with the masked match. Pure Claude Code, no signup.
- ▌ Dead Code Scan · quality-maxFind dead code in a repo — unused exports, unreferenced files, unreachable branches, unused imports, and declared-but-unused dependencies. Reports each with file:line and a safe-to-remove confidence. Pure Claude Code, no signup.
- ▌ I18N Rtl Audit · quality-maxAudit a page for internationalization readiness — layout breaks under long translations (pseudo-localization), RTL rendering issues, hardcoded UI strings, and missing lang/dir attributes. Playwright MCP only, no signup.
- ▌ Core Web Vitals · quality-maxMeasure Core Web Vitals on any URL — LCP, CLS, INP, TTFB, FCP — using the browser's own performance APIs. Grades each metric against Google's thresholds and produces an A-F report. Playwright MCP only, no signup.
- ▌ Broken Link Scan · quality-maxFind broken links on any website. Crawls the page, checks every link for 404s, redirects, and timeouts. Reports dead links with their location. Uses Playwright MCP only — no signup.
- ▌ Dependency Audit · quality-maxAudit project dependencies for risk — known-vulnerable versions, unpinned ranges, abandoned packages, and badly outdated majors. Reads package.json, requirements.txt, go.mod, Cargo.toml. Pure Claude Code, no signup.
- ▌ Diff Risk Review · quality-maxReview the current git diff for correctness, security, and performance risks before you commit. Produces severity-ranked findings with the exact file:line and a suggested fix. Pure Claude Code — no MCP, no signup.
- ▌ API Security Scan · quality-maxReview a REST/HTTP API — from its OpenAPI spec or route code — for security gaps like missing auth, broken object-level authorization, no rate limiting, and verbose errors. Reports file:line. Pure Claude Code, no signup.
- ▌ Third Party Bloat · quality-maxInventory third-party scripts on a page — analytics, tag managers, chat widgets, ads, A/B tools — and rank them by transfer size and main-thread cost. Flags the heaviest offenders. Playwright MCP only, no signup.
- ▌ Console Error Scan · quality-maxDetect JavaScript errors, warnings, and failed network requests on any page. Navigates the URL, collects console output and network failures. Uses Playwright MCP only — no signup.
- ▌ Iac Misconfig Scan · quality-maxScan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files, unpinned actions, and hardcoded secrets. Pure Claude Code, no signup.
- ▌ Mixed Content Scan · quality-maxScan an HTTPS page for mixed content — HTTP scripts, styles, images, iframes, and insecure form actions. Separates browser-blocked active mixed content from passive, with the exact offending URLs. Playwright MCP, no signup.
- ▌ Page Weight Budget · quality-maxAudit a page's weight against a performance budget — total transfer bytes, request count, render-blocking JS/CSS, and oversized or uncompressed images. Produces a pass/fail budget report. Playwright MCP only, no signup.
- ▌ Accessibility Check · quality-maxQuick WCAG accessibility scan of any URL. Checks color contrast, missing alt text, keyboard navigation, ARIA labels, heading hierarchy, and focus indicators. Produces a graded report. Uses Playwright MCP only — no signup.
- ▌ Cold Load Waterfall · quality-maxProfile a cold, cache-empty page load and build a text waterfall — the longest-pole requests, time to first byte, and time to interactive. Flags the critical-path bottlenecks. Playwright MCP only, no signup.
- ▌ Complexity Hotspots · quality-maxRank the most complex code in a repo — long functions, deep nesting, high cyclomatic complexity, and god-files — worst-first, with a refactor suggestion for each. Pure Claude Code, no MCP, no signup.
- ▌ Cookie Privacy Scan · quality-maxAudit a site's cookies and trackers — inventory every cookie, flag missing Secure/HttpOnly/SameSite, list third-party trackers, and detect tracking that fires before consent. Playwright MCP only, no signup.
- ▌ Flaky Selector Scan · quality-maxScan a UI test suite (Playwright, Cypress, Selenium) for brittle locators — nth-child, absolute XPath, text-coupled, and auto-generated class hashes — and suggest stable role/data-test replacements. Pure Claude Code, no signup.
- ▌ Test Quality Review · quality-maxReview an existing test suite for quality, not coverage — assertion-free tests, weak assertions, disabled/skipped tests, over-mocking, and missing edge cases. Reports per-test with a fix. Pure Claude Code, no signup.
- ▌ Error Handling Audit · quality-maxAudit a repo (or diff) for weak error handling — swallowed exceptions, bare catches, unhandled promise rejections, missing network timeouts/retries, and errors logged but not surfaced. Pure Claude Code, no MCP, no signup.
- ▌ Form Validation Scan · quality-maxProbe the forms on a page for validation gaps — missing required-field enforcement, no client-side validation, accepts malformed input, and absent error messaging. Reports per-field findings. Playwright MCP only, no signup.
- ▌ Responsive Screenshots · quality-maxScreenshot any URL at 5 viewport sizes — mobile, tablet, laptop, desktop, and ultrawide. Saves PNGs and reports layout issues. Uses Playwright MCP only — no signup.
- ▌ Security Headers Check · quality-maxCheck HTTP security headers on any URL. Grades CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy. Produces an A-F report with specific missing or misconfigured headers. No signup.
- ▌ Agentic App Risk Review · quality-maxDefensive review of an LLM/agent application for OWASP-LLM-style risks — prompt injection, unsafe tool calls, excessive agency, and PII/secret leakage. Reads your code, flags issues with file:line. Pure Claude Code, no signup.
- ▌ License Compliance Scan · quality-maxCheck dependency licenses against your project's license and flag conflicts, copyleft obligations, and unknown/unlicensed packages. Reads manifests directly. Advisory, not legal advice. Pure Claude Code, no signup.