AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Scanner Protocol

skill-gustavo-meilus-superpipelines-scanner-protocol · by gustavo-meilus

Loaded by the scanner agent to supply operating protocol and invariants for source file metric extraction in the parity-test-d pipeline. Not user-invocable.

— No reviews yet
0 installs
35 views
0.0% view→install

Install

$ agentstack add skill-gustavo-meilus-superpipelines-scanner-protocol

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-gustavo-meilus-superpipelines-scanner-protocol)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Scanner Protocol? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Scanner — Operational Protocol

The scanner agent reads all source files in a target directory, extracts per-file code health metrics (high complexity, missing docstrings, long functions), and writes a structured JSON metrics file to the pipeline temp directory. It is the first step of the parity-test-d Sequential pipeline (Pattern 1) on Tier 1c (Antigravity CLI). The quality bar is: metrics must be machine-readable JSON that the reporter can consume without ambiguity.

Protocol

1. DISCOVER

  1. Read inputs from the orchestrator dispatch context:
  • source_directory: path to the directory containing source files to scan.
  • metrics_output_path: path where scanner-metrics.json must be written.
  • state_path: path to pipeline-state.json for status updates.
  • run_id: current run identifier.
  • root: resolved scope root.
  1. Verify source_directory exists and is a readable directory. If not: emit NEEDS_CONTEXT with message: "Source directory not found at {source_directory}. Provide a valid path and re-run."
  2. Enumerate all source files in source_directory (recursively, using Glob). Common source extensions: .py, .js, .ts, .go, .java, .rb, .rs, .cs. If no matching files found: emit DONE_WITH_CONCERNS with message: "No source files found in {source_directory}. Metrics file written with zero entries."

2. PROCESS

For each source file discovered:

  1. High complexity: flag a file if it contains deeply nested conditionals (4+ levels), or if a single function/method appears to span more than 50 lines AND contains multiple branching paths. Record:

``json {"file": "{relative_path}", "complexity_score": , "reason": ""} ``

  1. Missing docstrings: flag a file if top-level functions, methods, or classes lack a docstring or leading comment block. Record:

``json {"file": "{relative_path}", "locations": [""]} ``

  1. Long functions: flag any function or method with a line count exceeding 60 lines. Record:

``json {"file": "{relative_path}", "function": "", "line_count": } ``

Assemble the metrics object:

{
  "scanned_directory": "{source_directory}",
  "file_count": 0,
  "high_complexity": [],
  "missing_docstrings": [],
  "long_functions": []
}

3. DELIVER

  1. Write scanner-metrics.json to metrics_output_path using the Write tool.
  2. Update pipeline-state.json:
  • Set phases[0].status = "completed" (or "completed_with_concerns" if any files were unreadable or no source files found).
  • Set phases[0].outputs = [metrics_output_path].
  1. Emit terminal status:
  • DONE — metrics written successfully, all files scanned without errors.
  • DONE_WITH_CONCERNS — metrics written but one or more files were unreadable, or no source files found (note which and why).
  • NEEDS_CONTEXT — source directory not found or not accessible.
  • BLOCKED — metrics file could not be written (e.g., disk write failure).
  • NEVER write metrics to a path outside {ROOT}/superpipelines/temp/parity-test-d/{runId}/.
  • NEVER pass file contents to the orchestrator in the status message — pass only the metrics file path.
  • ALWAYS validate that metrics_output_path is writable before attempting write.
  • ALWAYS update pipeline-state.json after writing metrics.
  • Emit exactly one terminal status: DONE / DONEWITHCONCERNS / NEEDS_CONTEXT / BLOCKED.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.