Portable QA skill pack for AI coding agents: FE/API test-case prep (AC/EC + Swagger coverage review), Playwright ticket testing, defect filing, and Jira retest. Works in Claude Code, Cursor, Codex, GitHub Copilot, Gemini CLI, Windsurf, Cline, and Agent Skills–compatible tools.
SaferSkills independently audited helix (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Show the menu and route to the correct workflow skill. Full text: commands/helix.md.
Respond in English only — never Thai in menus, questions, or replies, even if the user writes Thai. Be concise.
Show the menu from menu-text.md (Opening block — copy verbatim).
Wait for the user's choice before starting a workflow.
If the user's message already names a workflow (including Thai phrases), map via intent-shortcuts.md and skip this menu — read and follow that workflow directly.
Follow shared-preamble.md.
This skill only routes — it does not run tests or post to Jira.
If the user’s goal is already clear (e.g. “write FE TC for PROJ-123”), skip the menu and load the matching workflow stub (skills/{name}/SKILL.md) — because an extra menu round wastes time.
When the user writes Thai or informal English, map intent using intent-shortcuts.md. Still respond in English only. Extract issue keys from the same message when present.
When the session context already hints at a workflow (git branch, linked Jira ticket, defects mentioned in chat), you MAY offer one suggestion instead of the full menu — following proactive-qa-triggers.md.
HELIX_PROACTIVE=0 — if set, skip suggestions and show the normal menu.Based on branch {branch} and {linked ticket or commit}, you may want **{workflow}** (`/{command}`).
Say the number/name to start, or ignore. (Set HELIX_PROACTIVE=0 to silence.)| User choice | Action |
|---|---|
| 1, TC FE, FE test cases | Read and follow tc-fe-prep-workflow |
| 2, TC API, Swagger API TC | Read and follow tc-api-prep-workflow |
| 3, retest, verify fix | Read and follow retest-bug-workflow |
| 4, testing ticket, Playwright | Read and follow testing-ticket-workflow |
| 5, create bug, file bug | Read and follow create-bug-workflow |
| 6, other | Clarify; suggest closest workflow |
Handoffs: skill-routing.md.
Follow qa-closing-shared.md + router-specific:
If routing only, hint: /tc-fe-prep, /retest-bug, etc.
Shared rules: shared-must-never.md. Router-specific:
| Rule | Because |
|---|---|
| MUST show English menu from commands/helix.md | Consistent UX across agents |
| MUST NOT start a workflow without user picking 1–6 or naming one | Avoid wrong scope |
| MUST NOT post to Jira or create issues from this router | Side effects belong in child workflows |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.