Add quality-scan skill and quality-loop command

[jdalton]

Summary

Adds comprehensive quality scanning capabilities to improve code quality and catch issues early.

What this adds:

• Quality-scan skill: Multi-dimensional code analysis with 7 specialized scan types
• Quality-loop command: Iterative improvement workflow (/quality-loop)

Scan Types

1. Documentation scan: Evaluate junior dev friendliness, examples, troubleshooting guides
2. Critical bugs scan: Security issues, data corruption, crashes, undefined behavior
3. Logic errors scan: Race conditions, edge cases, incorrect state management
4. Caching bugs scan: Validation bypasses, stale data, corruption risks
5. Workflow issues scan: Subprocess errors, cleanup failures, error handling gaps
6. CI optimization scan: Performance improvements, caching strategies, matrix optimization
7. Security scan: Input validation, path traversal, injection vulnerabilities

Usage

Run full scan + fix cycle:

/quality-loop

Or use Task tool for targeted analysis:

Task({
  subagent_type: 'quality-scan',
  prompt: 'Analyze codebase for critical bugs and logic errors'
})

Track Record

Successfully used in socket-btm to identify and fix 20+ issues including:

• Critical path traversal vulnerabilities in checkpoint restoration
• Hash collision bugs in cache key computation
• Missing validation in artifact restoration
• Documentation gaps for junior developers
• Stale checkpoint detection logic
• Size limit bypass vulnerabilities

This tooling provides proactive quality improvement and catches issues before they reach production.

[bmeck]

seems good but a bit odd ref to btm