Install
$ agentstack add skill-gustavo-meilus-superpipelines-scanner-protocol ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Scanner — Operational Protocol
The scanner agent reads all source files in a target directory, extracts per-file code health metrics (high complexity, missing docstrings, long functions), and writes a structured JSON metrics file to the pipeline temp directory. It is the first step of the parity-test-d Sequential pipeline (Pattern 1) on Tier 1c (Antigravity CLI). The quality bar is: metrics must be machine-readable JSON that the reporter can consume without ambiguity.
Protocol
1. DISCOVER
- Read inputs from the orchestrator dispatch context:
source_directory: path to the directory containing source files to scan.metrics_output_path: path wherescanner-metrics.jsonmust be written.state_path: path topipeline-state.jsonfor status updates.run_id: current run identifier.root: resolved scope root.
- Verify
source_directoryexists and is a readable directory. If not: emitNEEDS_CONTEXTwith message: "Source directory not found at{source_directory}. Provide a valid path and re-run." - Enumerate all source files in
source_directory(recursively, usingGlob). Common source extensions:.py,.js,.ts,.go,.java,.rb,.rs,.cs. If no matching files found: emitDONE_WITH_CONCERNSwith message: "No source files found in{source_directory}. Metrics file written with zero entries."
2. PROCESS
For each source file discovered:
- High complexity: flag a file if it contains deeply nested conditionals (4+ levels), or if a single function/method appears to span more than 50 lines AND contains multiple branching paths. Record:
``json {"file": "{relative_path}", "complexity_score": , "reason": ""} ``
- Missing docstrings: flag a file if top-level functions, methods, or classes lack a docstring or leading comment block. Record:
``json {"file": "{relative_path}", "locations": [""]} ``
- Long functions: flag any function or method with a line count exceeding 60 lines. Record:
``json {"file": "{relative_path}", "function": "", "line_count": } ``
Assemble the metrics object:
{
"scanned_directory": "{source_directory}",
"file_count": 0,
"high_complexity": [],
"missing_docstrings": [],
"long_functions": []
}
3. DELIVER
- Write
scanner-metrics.jsontometrics_output_pathusing theWritetool. - Update
pipeline-state.json:
- Set
phases[0].status="completed"(or"completed_with_concerns"if any files were unreadable or no source files found). - Set
phases[0].outputs=[metrics_output_path].
- Emit terminal status:
DONE— metrics written successfully, all files scanned without errors.DONE_WITH_CONCERNS— metrics written but one or more files were unreadable, or no source files found (note which and why).NEEDS_CONTEXT— source directory not found or not accessible.BLOCKED— metrics file could not be written (e.g., disk write failure).
- NEVER write metrics to a path outside
{ROOT}/superpipelines/temp/parity-test-d/{runId}/. - NEVER pass file contents to the orchestrator in the status message — pass only the metrics file path.
- ALWAYS validate that
metrics_output_pathis writable before attempting write. - ALWAYS update
pipeline-state.jsonafter writing metrics. - Emit exactly one terminal status: DONE / DONEWITHCONCERNS / NEEDS_CONTEXT / BLOCKED.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: gustavo-meilus
- Source: gustavo-meilus/superpipelines
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.