← All skills
quality
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By corca-ai/charness (GitHub) · security · 11 stars · scanned at commit abdb77f
Use when the goal is to understand and improve the repo's current quality bar. Detect existing gates, run the available ones, inspect concept integrity, test confidence, and security posture, then propose concrete quality moves instead of only complaining about what is missing.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a security skill.
Found in 20 places.
Show 17 more
- skills/public/quality/scripts/command_dominance_carriers.py, line 43
returned [] for each and a dominated whole-suite run inside `bash -c` was - skills/public/quality/scripts/command_dominance_lib.py, line 131
A LIST rather than one result, because `bash -c '<command>'` runs a command - skills/public/quality/scripts/command_dominance_lib.py, line 211
"""`bash -c '<command>'` runs a command this reader can still see.""" - skills/public/quality/scripts/js_settlement_scan_lib.py, line 174
The call regex runs over raw source, so `// legacy: execSync(cmd, {timeout: 1000})` - skills/public/quality/scripts/js_settlement_scan_lib.py, line 175
and `const doc = "execSync(cmd, {timeout: 1000})"` each minted a seam with a - skills/public/quality/scripts/js_settlement_scan_lib.py, line 187
could not distinguish: `execSync(a); spawnSync(b, {timeout: 100})` gave BOTH calls a - skills/public/quality/scripts/js_settlement_scan_lib.py, line 231
fn(execSync(x, {timeout: 5})))`` declares no timeout of its own), but a nested OBJECT - skills/public/quality/scripts/js_settlement_scan_lib.py, line 232
or ARRAY did not (``spawnSync(cmd, args, {env: e, child: {timeout: 1000}})`` was read - skills/public/quality/scripts/js_settlement_scan_lib.py, line 264
(`child_process` sync helpers and `execa`) applies its timeout only when the value is - skills/public/quality/scripts/measure_startup_probes.py, line 146
last_result: subprocess.CompletedProcess[str] | None = None - skills/public/quality/scripts/nose_tool_lib.py, line 40
"""Normalize fields shared by every completed Nose subprocess.""" - skills/public/quality/scripts/pytest_temp_scan_lib.py, line 169
) -> tuple[subprocess.CompletedProcess[str] | None, str]: - skills/public/quality/scripts/pytest_temp_scan_lib.py, line 190
except subprocess.SubprocessError: - skills/public/quality/scripts/pytest_temp_scan_lib.py, line 227
) -> tuple[subprocess.CompletedProcess[str] | None, str, int, int]: - skills/public/quality/scripts/runtime_budget_universe_lib.py, line 118
shell=True, - skills/public/quality/scripts/surface_marker_lib.py, line 25
only match is `// legacy: execSync(cmd)` is counted here and contributes no seam. The - skills/public/quality/scripts/test_discovery_lib.py, line 130
shell=True,
Downloads and installs other software
The author does not mention this.
Found in 14 places.
Show 11 more
- skills/public/quality/scripts/inventory_command_dominance.py, line 59
f" Install PyYAML into THIS interpreter: {sys.executable} -m pip install PyYAML" - skills/public/quality/scripts/inventory_command_dominance.py, line 64
f" Install it into THIS interpreter: {sys.executable} -m pip install " - skills/shared/references/binary-preflight.md, line 121
| `rg` | `sudo apt-get install -y ripgrep` | - skills/shared/references/binary-preflight.md, line 122
| `jq` | `sudo apt-get install -y jq` | - skills/shared/references/binary-preflight.md, line 123
| `fd` | `sudo apt-get install -y fd-find` | - skills/shared/references/binary-preflight.md, line 124
| `gh` | `sudo apt-get install -y gh` | - skills/shared/references/binary-preflight.md, line 125
| `node` | `sudo apt-get install -y nodejs` | - skills/shared/references/binary-preflight.md, line 126
| `uv` | (no apt package; propose `pipx install uv`) | - skills/shared/references/binary-preflight.md, line 127
| `yq` | `sudo apt-get install -y yq` | - skills/shared/references/binary-preflight.md, line 128
| `bat` | `sudo apt-get install -y bat` | - skills/shared/references/binary-preflight.md, line 141
> installed on this host. Propose to run `sudo apt-get install -y ripgrep`.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'quality' ] || [ -L ~/.agents/skills/'quality' ]; then echo 'A skill folder named quality already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/corca-ai/charness' "$d" && git -C "$d" checkout --quiet 'abdb77fd876eb7700c9550b0c6fcd96ee10bee84' -- 'skills/public/quality' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/public/quality' ~/.agents/skills/'quality' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'quality' ~/.claude/skills/'quality' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for corca-ai/charness shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/corca-ai/charness/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | abdb77f | 80 |
| 2026-11-06 | abdb77f | 80 |