Install
$ agentstack add skill-ivorycanvas-qamap-qamap-pr-qa ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
QAMap PR QA
Use QAMap as a final local QA pass before presenting a pull request for human review.
Workflow
- Detect the comparison base.
- Prefer the target PR base branch when known.
- Otherwise use
origin/main, thenorigin/master, then the repository default branch.
- Run QAMap from the repository root. Prefer the compact agent format — it carries the same decision content as the markdown report in a fraction of the tokens:
``sh pnpm dlx @ivorycanvas/qamap qa . --base --head HEAD --format agent ``
For an installed project, prefer:
``sh pnpm exec qamap qa . --base --head HEAD --format agent ``
Drop --format agent when a human will read the output directly; the default markdown report is written for people. The agent JSON is a versioned contract (schema: qamap.qa v1, additive-only): see docs/agent-format.md in the QAMap repository.
- If the repository is a monorepo and the changed files are clearly inside one package, run a scoped pass too:
``sh pnpm dlx @ivorycanvas/qamap qa --workspace-root . --base --head HEAD ``
- If QAMap prints
First E2E Draft Bootstrap, treat it as an instruction to create the starter draft before writing broad QA notes:
``sh pnpm exec qamap e2e setup . --runner ``
Use the exact create command from the output when it differs.
- Read the output. In agent format (single minified JSON object,
schema.name=qamap.qa):
flows[]— affected flows withdraftpath,runnablestatus,entryroute, cappedstepsandselectors.requiredEvidence[]— evidence that must exist before the PR can be trusted;recommendedEvidenceCountfor the rest.requiredBootstrap[]— setup steps that block trusting generated drafts.firstDraftCommand— present only when the repo has no test suite; run it to create the first starter draft.prChecklist[]andcommands[]— checklist lines and validation commands for the handoff.
In markdown format, start from At a Glance (affected flows, the single next command, blocking items), then read the PR Comment Draft, Missing Evidence Before Trusting This PR, and PR Checklist sections.
- Include the useful parts in the PR body, review note, or handoff summary.
Output Rules
- Treat QAMap output as QA planning evidence, not proof that browser, device, API, or manual QA passed.
- Preserve the affected flow, suggested E2E/checklist path, missing evidence, and validation command in the handoff.
- Prefer creating the suggested starter E2E draft over only reporting that a draft is needed.
- If QAMap recommends Playwright, Maestro, or manual QA, do not force a different runner unless the repository already has stronger runner evidence.
- If the output is
review onlyornear runnable, explain what blocks it from becoming trusted regression evidence. - If
qamap qasays no manifest was found, do not stop. The first run is allowed to be manifest-free.
Manifest Repair
When the recommendation is wrong or too broad, do not repeatedly re-prompt for the same QA context. Ask the maintainer which domain, flow, anchor, or check should be corrected.
If the team accepts QAMap for ongoing use, suggest this follow-up:
pnpm exec qamap manifest init .
Then humans should review .qamap/manifest.yaml and keep only durable team QA language.
Handoff Template
QAMap QA
- Affected flow:
- Suggested E2E/checklist:
- Missing evidence:
- Validation command:
- Manifest repair needed:
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: IvoryCanvas
- Source: IvoryCanvas/qamap
- License: MIT
- Homepage: https://www.npmjs.com/package/@ivorycanvas/codeward
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.