assurance

Plugin assurance from marketplace better-toolkits in chimeranext/better-toolkits. Commands read from the repo's manifest — yesterday.

Skills (24)

• assurance-testing-audit

  Audits whether a repo's testing frameworks are wired into the assurance evidence pipeline,mobile (Maestro, MobileWright, Patrol, Qualflare), web (Playwright, Cypress, Vitest/Jest), API/contracts (Schemathesis, Pact),via static scan. Use when verifying test infrastructure against the assurance eviden

• assurance

  Release-assurance evidence protocol — 2 pillars (testing, liveness) + security transversal with its own runner + governance (metrics, gates, receipts). Use when the user invokes /assurance commands or asks about quality evidence, release readiness, or quality gates.

• cicd-argocd

  ArgoCD GitOps — sync como gate (waves/hooks/health). Migrated; protocol SSOT in assurance governance.

• cicd-github-actions

  GitHub Actions — wiring de gates en CI. Migrated; protocol SSOT in assurance governance.

• flutter-accessibility

  Flutter a11y — Semantics, TalkBack/VoiceOver, WCAG, focus, contraste. Migrated; protocol SSOT in assurance testing.

• flutter-error-tracking

  Error tracking — Sentry/Crashlytics, breadcrumbs, source maps. Migrated; protocol SSOT in assurance liveness.

• flutter-mobile-testing

  Device testing with Dart/Flutter MCP + Mobile Next MCP — widget tree inspection, sims and real devices. Migrated; protocol SSOT in assurance testing.

• flutter-performance

  Flutter performance — rebuilds, lists, memory, lazy loading, profiling. Migrated; protocol SSOT in assurance testing.

• flutter-security

  Flutter security — pinning, secure storage, obfuscation, biometrics. Migrated; protocol SSOT in assurance security (mobile MASVS).

• flutter-testing-strategy

  Flutter testing pyramid — unit, widget, integration tests + TDD. Migrated from flutter-boilerplate-monorepo-template; protocol SSOT in assurance testing.

• github-app-setup

  Teaches the founder to create their own GitHub App (from the organization settings) so that the /local-pr-review posts reviews signed as that App (CodeRabbit/Greptile style). Use when the user asks for "github app setup", "crear mi GitHub App", "setear github app", "github app para PR review", "que

• sre-alerting-incident-management

  Alerting + incident — PagerDuty/Opsgenie, on-call, monitoring-as-code. Migrated; protocol SSOT in assurance liveness/governance.

• sre-chaos-engineering

  Chaos — Litmus, failure injection, game days. Migrated; protocol SSOT in assurance liveness.

• sre-container-security

  Container security — image scanning/signing, Falco, CVE. Migrated; protocol SSOT in assurance security (supply-chain).

• sre-database-reliability

  DB reliability — replication, backup, failover (parte testing, parte liveness). Migrated; protocol SSOT in assurance testing/liveness.

• sre-disaster-recovery-business-continuity

  DR/BC — drills + RPO/RTO como SLOs (parte testing, parte governance). Migrated; protocol SSOT in assurance testing/governance.

• sre-load-testing-performance

  Load testing recetas — k6, JMeter, stress, capacity planning. Migrated; protocol SSOT in assurance testing.

• sre-logging-log-aggregation

  Logging — Loki/ES/Fluentd, structured logs. Migrated; protocol SSOT in assurance governance.

• sre-network-policies-security

  Network policies — Calico/Cilium, egress/ingress verificable. Migrated; protocol SSOT in assurance security.

• sre-observability-stack

  Observability — Prometheus, Grafana, Jaeger, OpenTelemetry. Migrated; protocol SSOT in assurance liveness.

• sre-security-compliance-automation

  Security automation — OPA policy-as-code, CIS, vuln scanning. Migrated; protocol SSOT in assurance security.

• sre-slo-sli-sla

  SLO/SLI/SLA — error budgets, MTTD/MTTR. Migrated; protocol SSOT in assurance governance.

• static-analysis

  SAST multi-lenguaje — dart-analyze, ruff, golangci, eslint, shellcheck, clippy. Migrated; protocol SSOT in assurance security.

• versioning-management

  SemVer + UNIVERSAL conventional commits (every repo). Migrated; protocol SSOT in assurance governance.

Slash commands (12)

• /assurance:assurance-local-setup

  Set up the local (developer-machine) side of the assurance gate: git hooks (pre-push/pre-commit), shared hook adapters, and typecheck dependencies. Runs entirely on the developer machine; never touches GitHub settings. Idempotent.

• /assurance:assurance-repo-setup

  Generate and ensure the repository-side assurance gate: .mega-linter.yml, CI workflows, shared tsconfig base, and (if permitted) the ruleset required_status_checks plus the internal-audits evidence repo. Requires admin on the remote to enforce; otherwise reports no-enforced/GAP. Idempotent. Accepts

• /assurance:assurance-testing-audit

  Audit whether the repo's testing framework(s) are wired into the assurance evidence pipeline (mobile: Maestro/MobileWright/Qualflare; web: Playwright/Cypress/Vitest; API: Schemathesis/Pact). Static scan + minimal probe. Accepts a repo path as $ARGUMENTS.

• /assurance:code-conventions-audit

  Unified code-conventions audit — aggregates repo-health (6 families), clean-code standards, and language records into one compliance report, reading the per-entity audit log (internal-audits). Warn no-block enforcement. Accepts a repo path as $ARGUMENTS.

• /assurance:e2e-test-builder

  Generate or update a TestSprite-compatible test-suite.json from use case documentation. Accepts a URL or file path as $ARGUMENTS.

• /assurance:e2e-test-preview

  Launch a Qt-based visual previewer for test-suite.json files. Auto-detects the suite in the current project, ensures PySide6 is installed, and opens an interactive table with filtering, detail pane, and CSV export. Accepts an optional path as $ARGUMENTS.

• /assurance:e2e-test-runner

  Execute E2E tests from a test-suite.json file. Selects the optimal runner for each scenario, produces immutable result files, and optionally reports to Linear or Markdown. Accepts a path to test-suite.json or a jq filter as $ARGUMENTS.

• /assurance:github-app-setup

  Interactive guide for the founder to create their OWN GitHub App (org settings) and use it as the author of Heimdall's reviews (CodeRabbit/Greptile style). Does not depend on the ChimeraNext App. Guide + manifest + key-chain + verification.

• /assurance:observability-audit

  Audit whether observability actually WORKS, not whether it is configured. Verifies telemetry is received (not merely emitted), that the configured credential points at a live destination, that init paths cannot silently disable monitoring, that alert channels carry real traffic and have named owners

• /assurance:pentest-playbook-setup

  Bootstrap and audit pentest playbook wiring — playbook ↔ CI workflows ↔ tenant triage config. Modes audit, sync, workflows, gaps. Pairs with pentest-runner and `/assurance:triage security`.

• /assurance:pentest-runner

  Run automated penetration tests following Cyber Kill Chain + OWASP methodology. Accepts a phase, OWASP category, or component as $ARGUMENTS.

• /assurance:triage

  PR-stage assurance hub — run per-pillar triage sub-protocols (testing, security, governance; liveness skip by default). PASS/BLOCKED before remote code review.

Similar plugins