proffesor-for-testing__agentic-qe

skills/proffesor-for-testing__agentic-qe

mirror of https://github.com/proffesor-for-testing/agentic-qe.git synced 2026-09-19 08:45:47 +08:00

Files

T

History

Dragan Spiridonov fc1e86ad2d fix(security): resolve P0/P1 issues from v3.8.3 QE swarm analysis

P0 fixes:
- Fix command injection (CWE-78) in test-verifier.ts: replace exec()
  with execFile() + ALLOWED_TEST_COMMANDS allowlist
- Unify SQL allowlists: add 5 missing tables to sql-safety.ts, replace
  local duplicate in unified-memory.ts with canonical validateTableName()
- Add validateTableName() to all 7 SQL interpolation sites in
  ruvector/brain-shared.ts

P1 fixes:
- Remove 70 process.exit() calls from learning.ts (45) and hooks.ts (25),
  replacing with return/throw for proper cleanup handler execution
- Move @faker-js/faker from dependencies to devDependencies (~8MB savings)
- Enable bundle minification: CLI 9.8→6.9MB (-30%), MCP 12→7.2MB (-40%)
- Fix no-op verification scripts to perform real checks with non-zero
  exit codes on failure

QE reports:
- Add 12 comprehensive QE analysis reports for v3.8.3 covering code
  quality, security, performance, tests, SFDIPOT, dependencies, API
  contracts, architecture/DDD, accessibility, and brutal honesty audit

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-19 13:53:54 +00:00

00-queen-coordination-summary.md

fix(security): resolve P0/P1 issues from v3.8.3 QE swarm analysis

2026-03-19 13:53:54 +00:00

01-code-complexity-smells-report.md

fix(security): resolve P0/P1 issues from v3.8.3 QE swarm analysis

2026-03-19 13:53:54 +00:00

02-security-analysis-report.md

fix(security): resolve P0/P1 issues from v3.8.3 QE swarm analysis

2026-03-19 13:53:54 +00:00

03-performance-analysis-report.md

fix(security): resolve P0/P1 issues from v3.8.3 QE swarm analysis