AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified Apache-2.0 Self-run

Codexqa Skill Router

skill-openqa-cn-codexqa-codexqa-skill-router · by openqa-cn

>

— No reviews yet
0 installs
0 views
— view→install

Install

$ agentstack add skill-openqa-cn-codexqa-codexqa-skill-router

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-openqa-cn-codexqa-codexqa-skill-router)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● today

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Codexqa Skill Router? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

codexqa-skill-router

Agent entry map for discover → match → ensure installed → hand off. Human docs (README.md, HOW_IT_WORKS.md, KNOWN_LIMITATIONS.md and .zh-CN twins) are not loaded at runtime.

This skill does not implement defect scans, case writing, RCA, or data build. It selects a pack skill, makes sure its files exist next to this router, then executes that skill's contract.

1. Discover (mandatory, every turn)

Refresh the match catalog:

python3 /scripts/discover_skills.py --with-catalog
  • Live siblings with SKILL.md appear as source: "live", installed: true.
  • Missing workers still appear from [references/catalog.json](references/catalog.json)

as source: "bundled", installed: false (for matching only).

  • needsInstall lists names that must be fetched before hand-off.
  • Optional: --skills-root when the pack is not this skill's parent.
  • Self-check: python3 …/discover_skills.py --self-check.

Do not hard-code the worker list in your reasoning — use the JSON. New skills become matchable after catalog.json is refreshed (maintainers: scripts/refresh_catalog.py in a full checkout). codexqa-skill-router is excluded.

If discovery fails entirely (script error), stop and report it. An empty live count is OK when the bundled catalog is non-empty.

Detailed match rules: [references/routing-rules.md](references/routing-rules.md).

2. Match the user request

Read the user's latest message (and only this-turn attachments they named). Discover still supplies the catalog. Routing does not score by overlapping words in descriptions. Run the decider:

python3 /scripts/suggest_route.py --text ""

Use --text-file when the message is long. If the script fails, stop and report the error — do not fall back to keyword overlap.

| outcome | Action | |---|---| | clear or explicit | Ensure + hand off to winner (sections 3–4) | | explicit_conflict | Do not start the named skill. Show reason and alternatives. Wait | | ambiguous | Ask once with at most three alternatives and one-line why. Wait | | chain | Propose steps in order. Ensure/start the first only after confirm | | none | Say no catalog skill claimed it; list catalog names; do not invent one |

A clear / explicit winner is authoritative. Description text must not override it. In particular, codexqa-defect-analyzer's phrase "review a diff/MR/PR" is an incremental scan scenario. It does not claim 代码评审, code review, PR review, or "review this PR".

Task shape, not the shared verb:

  • 代码评审 / 代码审查 / 走查 / 单文件或整仓评审 / code review / PR·MR review / 审查意见 / 语义评审 / 双语审查 / 证据包 / 合入建议 / 这段代码有没有问题 → codexqa-code-reviewer
  • 缺陷检测 / SAST / 漏洞·密钥·依赖·CVE / 安全基线 / 粘贴或上传代码找漏洞 / report_scan / "review this diff for vulnerabilities" → codexqa-defect-analyzer. 格式化、自动改风格不归这里
  • Both a review report and a scan list, with no order → ambiguous (ask). 先评审再扫描 → chain, reviewer then defect
  • 影响面 / 谁在调用 / 入口风险 / 敏感路径 / 测试缺口 / 有没有单测 / 回归哪些 / 相对 main 变了什么 / 建索引 / 错误定位 / 模块归属 → codexqa-code-analyzer. Those words inside a 代码评审 stay with the reviewer. 补测试缺口 stays here; 补测试 / 写用例 does not
  • 架构 wiki / 模块地图 / 模块划分 / 从哪开始读 / 阅读导览 / 仓库导览 / 这个模块是干什么 / wiki inputs → codexqa-code-wiki. Bare 知识图谱 → ask (wiki vs analyzer)
  • 堆栈 / 根因 / 崩溃 / 报错原因 / 线上报错 / 日志里的异常 / 调试输出 / 根因报告 → codexqa-rootcause-analyzer. A call chain or "报错在哪" used to explain that failure stays root-cause
  • 需求评审 / 需求缺口 / 需求歧义 / 需求一致性 / 非功能需求 / 需求能不能测 / requirements review → codexqa-requirement-analyzer, not a code review
  • 测试方案 / 测试分析 / 写用例 / 方案和用例 / 按 PRD 出测试 / 提测前改用例 / 提测后补用例 / test plan → codexqa-testcase-generator. 写单元测试不归这里
  • 造数据 / 用例物料 / 前置账号 / 造一笔订单 / 造数脚本 / 发布成工具 / 回写前置 / OpenAPI 造账号 → codexqa-testdata-generator

When the user names a catalog skill whose own boundary rejects that task shape, outcome is explicit_conflict: warn and offer alternatives. Do not install the rejected fit. Detail: [references/routing-rules.md](references/routing-rules.md).

3. Ensure the winner is installed

If the chosen entry has installed: false (or no skillMd on disk):

  1. Tell the user in one sentence that you will install `` beside

codexqa-skill-router so you can follow its contract (network fetch from the codexqa pack, unless a local checkout is available).

  1. If the user refuses, stop and give the manual hint:

npx skills add openqa-cn/codexqa --skill .

  1. If they agree (or already said to proceed / auto-route fully), run:
python3 /scripts/ensure_skill.py  --yes

Dev / offline: add --from-repo /path/to/codexqa to copy from a local clone instead of the network. Dry-run: omit --yes or pass --dry-run.

  1. Re-run discover_skills.py --with-catalog and confirm the skill is

installed: true with a real skillMd path. If ensure failed, show the JSON error and stop — do not invent the worker workflow.

Why ask once: installing copies third-party skill files onto disk. Why still automate: a router that only prints a name does not complete the user's task.

4. Hand off and execute

  1. Announce the choice in one short sentence: skill name + why (+ "installed

just now" if ensure ran).

  1. Read the chosen skillMd (and only the references that skill says to

load next). Prefer the path returned by discover/ensure — do not rely on the host having re-indexed its skill list yet.

  1. Follow that skill completely for the user's request — same gates,

scripts, and artifacts.

  1. Do not re-implement the target skill inside this router. Do not skip its

"ask before Exec" or similar stop conditions.

  1. If mid-flight the work clearly belongs elsewhere, stop, re-discover, and

re-route (ensure the new winner if needed).

5. Done criteria

Routing is done when either:

  • the chosen skill's own done criteria are met, or
  • you asked a clarification / install-consent question and are waiting, or
  • you reported that no catalog skill fits or ensure failed.

6. Boundaries

  • Does not replace worker skills; it only selects, installs if needed, and

follows them.

  • Does not install missing CLIs (codexqa, jq, …); the target skill's

compatibility section still applies after hand-off.

  • Does not edit sibling skills as part of routing (install/copy only).
  • Bundled catalog.json may lag a brand-new unpublished skill until refreshed;

live siblings still win when present.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.