Skip to content
Back to skills

Qa Orchestrator

ASecurity

Directs intent classification and coordinates specialized QA sub-agents through the 12-stage enterprise quality lifecycle. ---

  • 4 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 7, 2026
ai-agentsgotestinggitapidatabasebackendsecuritydocumentation

Works with

  • api

Security analysis

A100/100

Scanned October 7, 2026

npx -y skills add romangalaxys10-spec/fable --skill qa-orchestrator --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Qa Orchestrator?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Qa Orchestrator
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/romangalaxys10-spec-qa-orchestrator/badge)](https://www.skillsdirectory.com/skills/romangalaxys10-spec-qa-orchestrator)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: qa-orchestrator
title: QA Intent Routing & Lifecycle Orchestration Engine
category: Orchestration
author: Principal QA Architect & Systems Staff Engineer
---

# qa-orchestrator — QA Intent Routing & Lifecycle Engine

Directs intent classification and coordinates specialized QA sub-agents through the 12-stage enterprise quality lifecycle.

---

## 1. Purpose
Determines exactly which QA engines and test layers must engage for any given code change or user request, avoiding wasted compute (e.g. CSS edits never trigger 4,000 API tests; payment updates trigger full adversarial verification).

---

## 2. When to Activate
- Initial step of any quality-related task or pull request review.
- When an agent needs to transition between testing lifecycle phases.

---

## 3. Inputs
- User prompt or PR description.
- Git commit range (`HEAD~1..HEAD`) and changed file paths.

---

## 4. Preconditions
- Target codebase accessible in working directory.
- `packages/core/src/context.ts` schema loaded.

---

## 5. Decision Rules
- **CSS / Documentation Change**: Route to visual smoke tests only; skip deep backend API suites.
- **Payment / Financial Logic Change**: Elevate risk to Critical (P0); route to unit pricing invariants, API contract tests, and Playwright checkout flows.
- **Database Migration**: Route to data-integrity and rollback tests.
- **Auth Boundary Modified**: Route to security fuzzing, session token tests, and access control matrices.

---

## 6. Workflow
```
1. CLASSIFY     ──▶ Parse commit diff and task keywords
2. CONTEXT      ──▶ Initialize Zod-validated QAContextModel
3. SELECT       ──▶ Select targeted sub-agent sequence
4. DISPATCH     ──▶ Execute sub-agents with shared context
5. SYNTHESIZE   ──▶ Compile unified Quality Scorecard
```

---

## 7. Anti-Patterns
- 🚫 Blind "run-all" execution on trivial cosmetic edits.
- 🚫 Skipping adversarial security reviews when modifying token or auth code.

---

## 8. Failure Handling
If any lifecycle phase detects a blocker, the orchestrator halts downstream deployment and emits structured failure diagnostics.

---

## 9. Evidence Requirements
`artifacts/orchestration-<runId>/routing-decision.json`.

---

## 10. Safety Constraints
The orchestrator operates in `READ-ONLY` mode during routing and planning.

---

## 11. Output Contract
```json
{
  "intent": "PR_QUALITY_AUDIT",
  "riskTier": "HIGH",
  "dispatchedSkills": ["qa-impact-analysis", "qa-test-generation", "qa-release-gate"],
  "skippedSkills": ["qa-mobile", "qa-visual"],
  "rationale": "Backend API change affecting checkout pricing; mobile and visual regression bypassed."
}
```

---

## 12. Verification Checklist
- [ ] Appropriate test layers selected based on changed files.
- [ ] Zero unnecessary full-suite executions on trivial commits.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.