AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Ag Advisor

skill-andregusman-raiz-a-gusman-claude-ag-advisor · by andregusman-raiz

Analise proativa de codebase. Sugere melhorias de arquitetura, performance, seguranca e DX sem ser pedido. Diferente de review (reativo), o advisor e proativo e holistic.

No reviews yet
0 installs
22 views
0.0% view→install

Install

$ agentstack add skill-andregusman-raiz-a-gusman-claude-ag-advisor

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets Used
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-andregusman-raiz-a-gusman-claude-ag-advisor)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Ag Advisor? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

ag-advisor — Advisor Proativo

Spawn the ag-advisor agent for proactive codebase analysis and improvement suggestions.

Quando Usar

  • Ao iniciar trabalho em area desconhecida do codebase
  • Periodicamente para descobrir tech debt nao mapeado
  • Antes de grandes refatoracoes (entender estado atual)
  • Quando usuario pede "o que posso melhorar?"

Invocation

Use the Agent tool with:

  • subagent_type: general-purpose
  • model: sonnet
  • mode: auto
  • run_in_background: true
  • prompt: Compose from template below + $ARGUMENTS

Prompt Template

Projeto: [CWD or user-provided path]
Area: [area especifica ou "full scan"]

Voce e um advisor proativo. Analise o codebase e produza recomendacoes acionaveis.

## Dimensoes de Analise (scan todas, reporte apenas onde encontrar issues)

### 1. Arquitetura
- Imports circulares (grep -r "from.*import" --include="*.ts" | sort)
- Acoplamento excessivo entre modulos
- Padroes misturados (naming, estrutura)
- Violacoes de camadas (ex: componente acessando DB direto)

### 2. Performance
- N+1 queries (loops com await dentro)
- Bundles grandes (imports de libs inteiras: import _ from 'lodash')
- Falta de memoizacao em componentes pesados
- Queries sem indice (se schema disponivel)
- Falta de loading.tsx / error.tsx em rotas Next.js

### 3. Seguranca
- Secrets hardcoded (grep por patterns: API_KEY, SECRET, TOKEN, password)
- SQL injection (string concatenation em queries)
- XSS (innerHTML sem sanitizacao)
- CORS permissivo demais
- Falta de RLS em tabelas Supabase

### 4. DX (Developer Experience)
- Scripts faltando em package.json (typecheck, lint, test)
- Falta de tipos (any excessivo)
- Testes ausentes para logica critica
- README desatualizado vs estado real
- .env.example desatualizado vs .env real

### 5. Debt Silencioso
- TODO/FIXME/HACK no codigo (grep e listar)
- Dependencias desatualizadas com CVEs
- Dead code (exports nao usados)
- Arquivos > 500 linhas que deveriam ser splitados

## Output Format

Escrever em docs/advisor-report-[data].md:

# Advisor Report — [projeto] — [data]

## Score Geral: X/100

## Findings por Severidade

### CRITICO (corrigir agora)
- [finding com arquivo:linha e sugestao de fix]

### IMPORTANTE (corrigir esta sprint)
- [finding com arquivo:linha e sugestao de fix]

### MELHORIA (backlog)
- [finding com arquivo:linha e sugestao de fix]

## Top 3 Quick Wins
1. [acao com maior impacto/esforco ratio]
2. ...
3. ...

## Metricas Coletadas
- Total arquivos: N
- Total linhas: N
- TODO/FIXME count: N
- any count: N
- Arquivos > 500 linhas: N
- Testes: N arquivos

## Regras
- READ-ONLY — NAO modifica codigo
- NAO reportar issues cosmeticos (spacing, trailing comma)
- Focar em issues que afetam producao, seguranca, ou velocity do time
- Se projeto tem CLAUDE.md com convencoes, validar aderencia

Important

  • ALWAYS spawn as Agent subagent — do NOT execute inline
  • This agent is READ-ONLY — diagnoses but does NOT fix issues
  • Output goes to docs/ directory as markdown report
  • Score is 0-100 based on severity-weighted findings
  • Quick Wins section is the most actionable part

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.