devx-qa

Plugin devx-qa from marketplace devx-plugins in agentic-dev3o/devx-plugins. Commands read from the repo's manifest — 2 days ago.

Skills (9)

• appsec-review

  This skill should be used when the user asks to "security review this PR", "review this diff for vulnerabilities", "appsec review these changes", "audit this branch for auth, injection, or data exposure bugs", "check this code for exploitable security issues", or requests a focused application secur

• babysit-pr

  Monitors a GitHub pull request's checks with the gh CLI, reads the logs of failing GitHub Actions jobs, classifies each failure as branch-caused or infrastructure, and drives the PR to green — fixing the branch's own breakage and delegating every commit, merge, and push to the devx-git skills. Use w

• code-review

  Reviews pull requests and code changes for correctness, conventions, maintainability, performance, test coverage, and security. Use when the user asks for a code review, PR review, feedback on a diff, or to check code quality.

• dead-code-fixer

  Finds and removes dead code across a repository too large for one context window. Static analyzers and a repository-wide reference count propose candidates, Haiku subagents verify each one through three independent lenses, and confirmed-dead code is deleted in waves gated by the project's type-check

• explaining-architecture

  Analyzes project architecture and generates ASCII state machine and sequence diagrams. Use for explaining a project, analyzing architecture, tracing an entrypoint, showing a state machine, or generating a sequence diagram.

• fixing-harness

  Audits a project's agentic harness (CLAUDE.md, AGENTS.md, .claude/rules, .claude/settings.json) and refactors it into a layered, path-scoped configuration that loads only what is relevant. Rewrites CLAUDE.md and AGENTS.md as a thin critical-rules layer, segments domain rules with `paths:` frontmatte

• fixing-react-antipatterns

  Audits React codebases for anti-patterns (useEffect misuse, missing cleanup, stale closures, derived-state-in-effects, memory leaks) and produces a scored gap analysis table with severity ratings. Applies prioritized fixes on request. Triggers on: audit react code, fix react anti-patterns, review re

• sec-patching-ts

  Ships a production security hotfix for vulnerable npm dependencies in a TypeScript or Node.js repository, on a trust-but-verify basis with proportional risk handling. It trusts the package manager to resolve a patched version, then verifies that the advisory is real and reaches production, that the

• fixing-skills

  Evaluate and improve a plugin's skills by applying Anthropic's skill authoring best practices. Use to fix, improve, or review skills for a specific plugin or agent team.

Subagents (3)

• dead-code-remover

  Editing agent dispatched by the devx-qa dead-code-fixer skill to delete declarations that three verifiers confirmed dead, inside the files its unit allows. Not for direct use.

• dead-code-scanner

  Read-only inventory agent dispatched by the devx-qa dead-code-fixer skill to list every declaration in one shard of source files. Not for direct use.

• dead-code-verifier

  Read-only verifier dispatched by the devx-qa dead-code-fixer skill to try to prove, through one lens, that dead-code candidates are still used. Not for direct use.

Similar plugins