Verification & Quality Assurance
- 982 installs
- 67k repo stars
- Updated August 4, 2026
- ruvnet/ruflo
Verification & Quality Assurance is an agent skill that provides truth scoring, automated correctness and security checks, quality metrics, and automatic rollback of changes that fail the 0.95 accuracy threshold.
About
Verification & Quality Assurance is an agent skill that delivers comprehensive truth scoring, automated correctness checks, security validation, and an automatic rollback system for agent-generated code and outputs. It calculates live reliability metrics on a 0.0-1.0 scale, runs regression-guard jobs, maintains a witness manifest, and exports results for CI/CD pipelines. Builders receive statistical trend analysis, confidence intervals, real-time monitoring, and instant reversion of any change that falls below the 0.95 accuracy threshold. The concrete shipped components include six regression-guard jobs plus the witness manifest and tool-discoverability audit that execute on every push. This skill gives solo developers confidence that agent outputs meet production standards without manual review of every diff.
- Real-time truth scoring on a 0.0-1.0 reliability scale for code, agents, and tasks
- Automated verification checks covering correctness, security, and best practices
- Automatic rollback of changes failing the 0.95 accuracy threshold
- Statistical quality metrics with trends, confidence intervals, and improvement tracking
- 6 regression-guard jobs, witness manifest, and tool-discoverability audit that run on every push
Verification & Quality Assurance by the numbers
- 982 all-time installs (skills.sh)
- +5 installs in the week ending Aug 4, 2026 (Skillselion tracking)
- Ranked #536 of 2,153 Testing & QA skills by installs in the Skillselion catalog
- Security screen: HIGH risk (skills.sh audit)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/ruvnet/ruflo --skill verification--quality-assuranceAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 982 |
|---|---|
| repo stars | ★ 67k |
| Security audit | 3 / 3 scanners passed |
| Last updated | August 4, 2026 |
| Repository | ruvnet/ruflo ↗ |
What it does
Automatically score output truthfulness, run correctness checks, and rollback low-quality agent changes before they reach production.
Who is it for?
Best when you want objective, automated guardrails around agent-generated code and need regression protection plus rollback safety without exhaustive manual testing.
Skip if: Projects that already have a mature, custom QA pipeline or developers who prefer purely manual review without automated scoring or rollback mechanisms.
When should I use this skill?
Use before merging agent-generated changes, after significant code generation, or when objective quality metrics and automatic rollback protection are required.
What you get
Every change receives a reliability score, failing items are automatically rolled back, and you obtain a witness manifest plus CI-exportable metrics that let you confidently ship or invoke further review.
- Witness manifest
- Truth score report with confidence intervals
- Automatic rollback of failing changes
By the numbers
- 0.95 accuracy threshold
- 6 regression-guard jobs
- 0.0-1.0 truth scoring scale
Files
Claims Authorization Skill
Purpose
Claims-based authorization for secure agent operations and access control.
Claim Types
| Claim | Description |
|---|---|
read | Read file access |
write | Write file access |
execute | Command execution |
spawn | Agent spawning |
memory | Memory access |
network | Network access |
admin | Administrative operations |
Commands
Check Claim
npx claude-flow claims check --agent agent-123 --claim writeGrant Claim
npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"Revoke Claim
npx claude-flow claims revoke --agent agent-123 --claim writeList Claims
npx claude-flow claims list --agent agent-123Scope Patterns
| Pattern | Description |
|---|---|
* | All resources |
/src/** | All files in src |
/config/*.toml | TOML files in config |
memory:patterns | Patterns namespace |
Security Levels
| Level | Claims |
|---|---|
minimal | read only |
standard | read, write, execute |
elevated | + spawn, memory |
admin | all claims |
Best Practices
1. Follow principle of least privilege 2. Scope claims to specific resources 3. Audit claim usage regularly 4. Revoke claims when no longer needed
Related skills
TddFollow test-driven development with a strict red-green-refactor loop when creating reliable features or fixing bugs.544k196k
Test Driven DevelopmentEnforce writing failing tests before any production implementation code.181k264kQaRun conversational QA sessions that turn user-reported bugs into well-written, domain-aware GitHub issues without manual ticket writing.179k196kMigrate To ShoehornAutomatically update TypeScript test files that rely on unsafe `as` type assertions by replacing them with type-safe partial objects from @total-typescript/shoehorn.164k196k
Webapp TestingVerify frontend behavior, debug UI issues, capture screenshots, and inspect logs of a running local web application using Playwright.123k165k
Playwright CliRun browser automation, generate element snapshots, inspect DOM attributes, and execute Playwright tests from the terminal.102k12.3kHow it compares
Use instead of ad-hoc chat prompting for quality checks or basic linters that lack truth scoring, statistical metrics, and automatic rollback.
FAQ
Who is Verification & Quality Assurance for?
Developers and developers using Claude Code, Cursor, or similar agents who need objective truth scoring and automatic protection against low-quality generated code.
When should I use Verification & Quality Assurance?
Use it after any agent makes significant code changes, before merging pull requests, when validating new features or refactors, when integrating third-party tools, and whenever you need a witness manifest for CI pipelines.
Is Verification & Quality Assurance safe to install?
Users should review the Security Audits panel on this page before installing. The skill includes automatic rollback capabilities that help protect your codebase from low-quality changes.