AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Analyze Repo

skill-kriscard-skills-analyze-repo · by kriscard

>-

No reviews yet
0 installs
43 views
0.0% view→install

Install

$ agentstack add skill-kriscard-skills-analyze-repo

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-kriscard-skills-analyze-repo)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Analyze Repo? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Repo Analysis

Visual, end-to-end codebase audit. The core insight: seeing architecture diagrammed (layers, data flow, dependency density) surfaces problems that are invisible when reading file-by-file. This skill makes the invisible visible, then asks the hard questions about what it found.

Workflow

Step 1 — Explore Agent

Use the Agent tool (subagent_type="explore") to map the codebase. The Explore agent has broad read access and should answer:

  • Architecture layers: what calls what? Is there a clear separation

(presentation → application → domain → infrastructure)?

  • File structure and organization: does the layout match the mental model

a new contributor would bring?

  • Key dependencies: what's the dependency graph? Which modules are most

imported? Any circular dependencies?

  • Tech debt hotspots: files over 500 lines, modules with high cyclomatic

complexity, areas with no test coverage, large TODO/FIXME density

  • Pattern consistency: is one pattern used throughout, or do multiple

competing patterns coexist (e.g., REST + GraphQL + tRPC in the same app)?

  • Language and runtime mix: TypeScript? JavaScript? Both? Any orphaned

migration artifacts?

Instruct the Explore agent to return structured findings in these categories: architecture, dependencies, hotspots, patterns, metrics.

Step 2 — Generate HTML Report

Write the report to:

$TMPDIR/repo-analysis-$(date +%Y%m%d-%H%M%S).html

See references/html-report-template.md for the full HTML template. The report sections are:

  1. Header — repo name, date, summary sentence
  2. Summary cards — file count, language breakdown, top-level modules, test

coverage estimate

  1. Architecture diagram — Mermaid graph TD showing layers and key edges
  2. Findings table — category, severity (critical/warning/info), description,

recommendation

  1. Top recommendations — ordered by estimated impact

Step 3 — Open the Report

open $TMPDIR/repo-analysis-$(date +%Y%m%d-%H%M%S).html

Run immediately after writing the file. The path must match exactly.

Step 4 — Surface Findings and Grill

Present the top 3–5 findings in order of impact. Then enter a grilling loop:

  • Ask one targeted question at a time about architectural decisions
  • Surface trade-offs the user may not have considered
  • Connect each finding to concrete impact (performance, maintainability,

onboarding cost, deployment risk)

  • Do not move to the next question until the current one is resolved

Example grilling questions (adapt to actual findings):

  • "Your auth logic is spread across 4 modules. Is that intentional — do

different callers need different auth behavior — or is this accidental duplication that's now inconsistent?"

  • "You have 3 competing data-fetching patterns: raw fetch, SWR, and TanStack

Query. What's the current standard? New contributors will guess wrong."

  • "The utils/ directory has 47 files. Is that a shared library or a junk

drawer? Files that live there because they have nowhere else to go are tech debt in disguise."

  • "Your largest file is 1,200 lines. Is that a god object, or a file that

grew with the feature? Either way: what's the plan?"

What Makes a Good Analysis

The Explore agent should be specific, not vague. Not "there are some large files" but "these 5 files are over 500 lines: [list], and they appear to handle more than one concern." Not "dependencies could be reviewed" but "module A imports from module B which imports from module A (circular dependency)."

The report's value is in the Mermaid diagram showing the real dependency structure and the findings table that forces prioritization. Both require specifics from the Explore phase.

References Routing Table

| Need | Load | |---|---| | HTML template for the report, Mermaid diagram structure, CSS/JS CDN links | references/html-report-template.md |

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.