← all publishers

QualityMax

@ruslan-strazhnyk

Follow

Report this profile

• 20 skills
• 1 follower
• 2 months ago last updated

1. ▌
   Complexity Hotspots · ruslan-strazhnyk

   Rank the most complex code in a repo — long functions, deep nesting, high cyclomatic complexity, and god-files — worst-first, with a refactor suggestion for each. Pure Claude Code, no MCP, no signup.
   17 installs
2. ▌
   Console Error Scan · ruslan-strazhnyk

   Detect JavaScript errors, warnings, and failed network requests on any page. Navigates the URL, collects console output and network failures. Uses Playwright MCP only — no signup.
   20 installs
3. ▌
   Cookie Privacy Scan · ruslan-strazhnyk

   Audit a site's cookies and trackers — inventory every cookie, flag missing Secure/HttpOnly/SameSite, list third-party trackers, and detect tracking that fires before consent. Playwright MCP only, no signup.
   18 installs
4. ▌
   Core Web Vitals · ruslan-strazhnyk

   Measure Core Web Vitals on any URL — LCP, CLS, INP, TTFB, FCP — using the browser's own performance APIs. Grades each metric against Google's thresholds and produces an A-F report. Playwright MCP only, no signup.
   23 installs
5. ▌
   Dead Code Scan · ruslan-strazhnyk

   Find dead code in a repo — unused exports, unreferenced files, unreachable branches, unused imports, and declared-but-unused dependencies. Reports each with file:line and a safe-to-remove confidence. Pure Claude Code, no signup.
   17 installs
6. ▌
   Accessibility Check · ruslan-strazhnyk

   Quick WCAG accessibility scan of any URL. Checks color contrast, missing alt text, keyboard navigation, ARIA labels, heading hierarchy, and focus indicators. Produces a graded report. Uses Playwright MCP only — no signup.
   19 installs
7. ▌
   Agentic App Risk Review · ruslan-strazhnyk

   Defensive review of an LLM/agent application for OWASP-LLM-style risks — prompt injection, unsafe tool calls, excessive agency, and PII/secret leakage. Reads your code, flags issues with file:line. Pure Claude Code, no signup.
   25 installs
8. ▌
   API Security Scan · ruslan-strazhnyk

   Review a REST/HTTP API — from its OpenAPI spec or route code — for security gaps like missing auth, broken object-level authorization, no rate limiting, and verbose errors. Reports file:line. Pure Claude Code, no signup.
   19 installs
9. ▌
   Broken Link Scan · ruslan-strazhnyk

   Find broken links on any website. Crawls the page, checks every link for 404s, redirects, and timeouts. Reports dead links with their location. Uses Playwright MCP only — no signup.
   20 installs
10. ▌
    Cold Load Waterfall · ruslan-strazhnyk

    Profile a cold, cache-empty page load and build a text waterfall — the longest-pole requests, time to first byte, and time to interactive. Flags the critical-path bottlenecks. Playwright MCP only, no signup.
    20 installs
11. ▌
    Dependency Audit · ruslan-strazhnyk

    Audit project dependencies for risk — known-vulnerable versions, unpinned ranges, abandoned packages, and badly outdated majors. Reads package.json, requirements.txt, go.mod, Cargo.toml. Pure Claude Code, no signup.
    18 installs
12. ▌
    Diff Risk Review · ruslan-strazhnyk

    Review the current git diff for correctness, security, and performance risks before you commit. Produces severity-ranked findings with the exact file:line and a suggested fix. Pure Claude Code — no MCP, no signup.
    18 installs
13. ▌
    Error Handling Audit · ruslan-strazhnyk

    Audit a repo (or diff) for weak error handling — swallowed exceptions, bare catches, unhandled promise rejections, missing network timeouts/retries, and errors logged but not surfaced. Pure Claude Code, no MCP, no signup.
    19 installs
14. ▌
    Flaky Selector Scan · ruslan-strazhnyk

    Scan a UI test suite (Playwright, Cypress, Selenium) for brittle locators — nth-child, absolute XPath, text-coupled, and auto-generated class hashes — and suggest stable role/data-test replacements. Pure Claude Code, no signup.
    18 installs
15. ▌
    Form Validation Scan · ruslan-strazhnyk

    Probe the forms on a page for validation gaps — missing required-field enforcement, no client-side validation, accepts malformed input, and absent error messaging. Reports per-field findings. Playwright MCP only, no signup.
    26 installs
16. ▌
    I18N Rtl Audit · ruslan-strazhnyk

    Audit a page for internationalization readiness — layout breaks under long translations (pseudo-localization), RTL rendering issues, hardcoded UI strings, and missing lang/dir attributes. Playwright MCP only, no signup.
    23 installs
17. ▌
    Iac Misconfig Scan · ruslan-strazhnyk

    Scan infrastructure-as-code — Dockerfiles, Compose, Terraform, and GitHub Actions — for security misconfigurations like running as root, world-writable files, unpinned actions, and hardcoded secrets. Pure Claude Code, no signup.
    19 installs
18. ▌
    License Compliance Scan · ruslan-strazhnyk

    Check dependency licenses against your project's license and flag conflicts, copyleft obligations, and unknown/unlicensed packages. Reads manifests directly. Advisory, not legal advice. Pure Claude Code, no signup.
    20 installs
19. ▌
    Mixed Content Scan · ruslan-strazhnyk

    Scan an HTTPS page for mixed content — HTTP scripts, styles, images, iframes, and insecure form actions. Separates browser-blocked active mixed content from passive, with the exact offending URLs. Playwright MCP, no signup.
    18 installs
20. ▌
    Page Weight Budget · ruslan-strazhnyk

    Audit a page's weight against a performance budget — total transfer bytes, request count, render-blocking JS/CSS, and oversized or uncompressed images. Produces a pass/fail budget report. Playwright MCP only, no signup.
    19 installs