Install
$ agentstack add skill-almax000-claude-skills-techdebt ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
/techdebt - 技术债务扫描
会话结束时运行,自动发现代码库中的技术债务。
扫描流程
1. 快速扫描(必做)
依次执行以下检查:
TODO/FIXME 标记
grep -rn "TODO\|FIXME\|HACK\|XXX" --include="*.ts" --include="*.tsx" --include="*.js" --include="*.vue" src/ 2>/dev/null | head -20
console.log 残留
grep -rn "console\.log\|console\.debug" --include="*.ts" --include="*.tsx" --include="*.vue" src/ 2>/dev/null | grep -v "node_modules" | head -20
未使用的导入(如果有 ESLint)
npm run lint 2>&1 | grep -i "unused\|no-unused" | head -10
2. 深度扫描(可选,用户要求时执行)
依赖安全审计
npm audit --audit-level moderate 2>/dev/null || echo "npm audit 不可用"
过期依赖
npm outdated 2>/dev/null | head -20
大文件检测(超过 500 行)
find src -name "*.ts" -o -name "*.tsx" -o -name "*.vue" 2>/dev/null | xargs wc -l 2>/dev/null | sort -rn | head -20
重复代码(如果安装了 jscpd)
npx jscpd src/ --min-lines 10 --reporters console 2>/dev/null || echo "jscpd 未安装,跳过"
输出格式
按优先级分类输出:
📋 技术债务报告
🔴 高优先级
├── npm audit: X 个漏洞
└── FIXME: 文件:行号 - 内容
🟡 中优先级
├── 大文件: 文件名 (XXX 行)
├── TODO: X 处待办
└── 重复代码: 文件A ↔ 文件B
🟢 低优先级
├── console.log: X 处残留
└── 过期依赖: X 个
使用场景
- 会话结束前运行,确保不遗留债务
- PR 前运行,确保代码质量
- 定期运行,追踪债务趋势
注意事项
- 只报告问题,不自动修复
- 高优先级问题建议立即处理
- 中/低优先级可加入 backlog
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: almax000
- Source: almax000/claude-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.