Install
$ agentstack add skill-nearform-unwind-uw-scan ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Discovering Architecture
Overview
Run a deterministic scan of the codebase, then dispatch a subagent to add narrative observations and adjudicate anything the scanner could not classify. The scanner (@unwind/core) produces a machine-readable scan-manifest.json — the ground truth for the file inventory, per-file structural symbols, the import graph, and a first-pass rebuild-layer assignment. The architecture document is derived from this manifest, so layer counts and entry points are verifiable rather than guessed.
Output: docs/unwind/architecture.md (derived) + docs/unwind/.cache/scan-manifest.json (ground truth)
> Graceful fallback: if Node/pnpm or @unwind/core are unavailable, the > deterministic scan is skipped and discovery falls back to the legacy pure-LLM > Explore flow (Step 1-LEGACY below). The skill always functions; the scan is an > enhancement, not a hard dependency.
When to Use
- Starting work on an unfamiliar codebase
- Onboarding to a new project
- Before planning a migration or major refactor
- Beginning a security audit or code review
The Process
Step 0: Run the Deterministic Scan
Build (first run only) and run the scanner. The helper resolves the plugin root and lazily builds @unwind/core:
# Locate the installed Unwind plugin, then load the core helper.
# $0/BASH_SOURCE are unreliable under `bash -c`, so glob the install cache.
UNWIND_PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-${UNWIND_PLUGIN_ROOT:-}}"
[ -f "$UNWIND_PLUGIN_ROOT/skills/scripts/_resolve-plugin-root.sh" ] || \
UNWIND_PLUGIN_ROOT="$(ls -dt "$HOME"/.claude/plugins/cache/*/unwind/*/ 2>/dev/null | head -1)"
source "${UNWIND_PLUGIN_ROOT%/}/skills/scripts/_resolve-plugin-root.sh"
ensure_unwind_core || { echo "core unavailable — using legacy discovery"; }
node "$UNWIND_PLUGIN_ROOT/skills/scripts/scan.mjs" "$(pwd)"
- On success: writes
docs/unwind/.cache/scan-manifest.json. Proceed to Step 1. - On non-zero exit (no Node/pnpm, or build failed): skip to Step 1-LEGACY.
The manifest already contains everything the old Step-1 git parsing produced, plus far more:
| architecture.md field | Manifest source | |-----------------------|-----------------| | repository block (type/url/branch/link_format) | manifest.repository (note: manifest uses linkFormat; emit it as link_format in YAML) | | Project name / language / framework | manifest.project | | Per-layer status + entry_points | manifest.stats.byLayer (status) + manifest.layerIndex[layer].files (entry points) | | Exact file/symbol counts | manifest.stats, manifest.files[].symbols |
Step 1: Derive architecture.md from the Manifest (+ adjudicate)
Read docs/unwind/.cache/scan-manifest.json. Then dispatch an Explore subagent whose job is now narrower (the inventory is already known):
- Adjudicate the
unassignedbucket.manifest.layerIndex.unassigned.files
lists files the scanner could not confidently place. Inspect them and assign each to a real layer (or confirm it's genuinely cross-cutting/non-layer).
- Add narrative observations per layer (technology, patterns, notable
aspects) — the facts the scan can't infer.
- Confirm/correct layer boundaries the scanner proposed.
Pass the subagent the manifest's repository, project, stats.byLayer, and the unassigned file list. It returns the architecture document content (same format as the Architecture Document Format below); the main agent writes it.
> Map the scanner's layers to architecture.md layer keys: database→database, > domain→domain_model, service→service_layer, api→api, > messaging→messaging, frontend→frontend. Tests and infrastructure are > recorded under their own sections. A layer with a non-zero count in > stats.byLayer is status: detected.
Step 1-LEGACY: Pure-LLM Discovery (fallback only)
Used only when the deterministic scan was unavailable in Step 0. Gather repo info and dispatch the Explore subagent to discover layers from scratch:
git remote get-url origin 2>/dev/null
git branch --show-current 2>/dev/null
Parse the remote URL:
- SSH format:
git@github.com:owner/repo.git→https://github.com/owner/repo - HTTPS format:
https://github.com/owner/repo.git→https://github.com/owner/repo - If no remote: use
localtype with null URL
Build the repository info block:
repository:
type: github|gitlab|bitbucket|local
url: https://github.com/owner/repo # or null if local
branch: main # or null if local
link_format: https://github.com/owner/repo/blob/main/{path}#L{start}-L{end}
Then dispatch an Explore subagent (see Subagent Prompt below) to discover layers and return the architecture document content.
Step 2: Check for Existing Documentation
Check if docs/unwind/architecture.md exists (Glob: docs/unwind/architecture.md):
- If exists: Pass to subagent as "previous analysis" for refresh mode
- If not: Fresh discovery
Step 3: Write the Architecture Document
When the Explore subagent completes with the document content:
- Create the output directory:
``bash mkdir -p docs/unwind ``
- Write the content to
docs/unwind/architecture.mdusing the Write tool
- Verify the file was created
Step 5: Present Results and Prompt User
After the subagent completes, present the results to the user:
## Architecture Discovery Complete
I've analyzed the codebase and created the architecture document.
**Output:** `docs/unwind/architecture.md`
### Summary
[Include the summary from the subagent - framework, layers detected, etc.]
### Detected Layers
[List layers with their confidence levels]
### Next Steps
**Use AskUserQuestion to let them choose** between:
1. **Open the dashboard now** *(recommended)* — visualize the scanned structure before going deeper
2. **Continue with layer analysis** — dispatch specialist subagents for each layer
3. **Review the architecture document first** — open `docs/unwind/architecture.md` to verify the detection is accurate
Then act on the choice in the same turn — don't just describe it:
- **Dashboard** → immediately invoke the `unwind:uw-dashboard` skill. It generates
`rebuild-graph.json` from the scan manifest and launches the interactive graph
(everything shows as `scanned` this early). When they're done exploring, offer to
continue with `unwind:uw-analyze`.
- **Continue** → invoke `unwind:uw-analyze`.
- **Review** → open `docs/unwind/architecture.md`; afterwards re-offer the same choice.
If they pause, tell them how to resume: *"Run `unwind:uw-analyze` (type `/uw-analyze`) when ready."*
> **Pipeline:** **scan ✓** → analyze → plan → dashboard. Each phase is its own skill
> and ends by asking whether to continue or pause. (`uw-graph` is an optional export;
> the dashboard builds its graph on demand.)
Important: Always give the user the option to review before proceeding. The architecture document drives all subsequent analysis, so accuracy matters.
Subagent Prompt
Use this prompt when dispatching the discovery subagent:
Explore this codebase to identify its architectural layers and structure.
## Your Task
Systematically explore the codebase and return the architecture document content. The main agent will write the file.
**Repository information has already been gathered and will be provided to you.** Use the provided `repository.link_format` for all source links.
## Phase 1: Project Identification
Identify the technology stack by looking for:
**Build System:**
- `package.json` → Node.js/JavaScript
- `pom.xml` / `build.gradle` → Java
- `requirements.txt` / `pyproject.toml` → Python
- `go.mod` → Go
- `Cargo.toml` → Rust
- `*.csproj` → .NET
**Framework:** Check dependencies for Spring Boot, Django, Express, Rails, Next.js, etc.
**Database:** Look for connection strings, ORM config, migration directories.
## Phase 2: Directory Mapping
Scan source directories and map to layers:
| Directory Pattern | Likely Layer |
|-------------------|--------------|
| `repository/`, `dao/`, `data/` | Database |
| `model/`, `entity/`, `domain/` | Domain Model |
| `service/`, `usecase/`, `application/` | Service Layer |
| `controller/`, `api/`, `rest/`, `graphql/` | API Layer |
| `messaging/`, `events/`, `queue/`, `kafka/` | Messaging |
| `components/`, `pages/`, `views/`, `ui/` | Frontend |
## Phase 3: Confidence Assessment
For each layer, assess confidence:
- **High**: Clear directory structure, multiple files, consistent naming
- **Medium**: Some indicators but mixed patterns
- **Low**: Minimal evidence
- **Not Detected**: No evidence found
## Phase 4: Cross-Cutting Concerns
Identify aspects spanning multiple layers:
- Authentication/Authorization
- Logging
- Error Handling
- Caching
- Validation
## Phase 5: Return Architecture Document
**DO NOT attempt to write the file** - you don't have write permissions. Instead, return the complete architecture document content in your response. The main agent will write it to `docs/unwind/architecture.md`.
Return the document in this exact format:
```markdown
# Architecture Discovery: [Project Name]
> **For Claude:** REQUIRED SUB-SKILL: Use unwind:uw-analyze to analyze each layer.
## Discovery Metadata
- **Generated:** [ISO timestamp]
- **Project Root:** [path]
- **Framework:** [detected framework]
- **Language:** [primary language]
## Repository Information
```yaml
repository:
type: github|gitlab|bitbucket|local
url: https://github.com/owner/repo # or null if local
branch: main # or null if local
link_format: https://github.com/owner/repo/blob/main/{path}#L{start}-L{end}
For all downstream agents: Use link_format to create source links. Replace {path}, {start}, {end} with actual values.
Layer Configuration
layers:
database:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/data/layer/
dependencies: []
domain_model:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/domain/
dependencies: [database]
service_layer:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/services/
dependencies: [domain_model]
api:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/controllers/
dependencies: [service_layer]
messaging:
status: detected|not_detected
confidence: high|medium|low
entry_points: []
dependencies: [service_layer]
frontend:
status: detected|not_detected
confidence: high|medium|low
entry_points: []
dependencies: [api]
cross_cutting:
authentication:
touches: [api, service_layer]
entry_points:
- path/to/security/
Database Layer
Status: [Detected/Not Detected] | Confidence: [High/Medium/Low]
Entry Points:
- [directories/files]
Initial Observations:
- [What you found - technology, patterns, notable aspects]
[Repeat for each layer with status != not_detected]
Cross-Cutting Concerns
Authentication
Touches: [layers] [Observations]
[Other concerns...]
Discovery Notes
- [Unknowns, questions, areas needing clarification]
{REFRESH_CONTEXT}
## Output
After creating the architecture document, provide a brief summary:
- Project type and framework
- Which layers were detected (with confidence)
- Any notable findings or concerns
Refresh Mode Context
If previous architecture.md exists, add this to the subagent prompt:
## Previous Analysis
A previous architecture analysis exists. Compare the current codebase state to this previous analysis and:
1. Note any changes in the `## Changes Since Last Discovery` section
2. Update layer status/confidence if changed
3. Add new entry points discovered
4. Remove entry points that no longer exist
5. Update the `last_analyzed` timestamp
Previous analysis:
[CONTENTS OF EXISTING architecture.md]
Layer Detection Reference
Database Layer Indicators
- Directories:
repository/,dao/,data/,persistence/ - Files:
*Repository.java,*_repository.py,*.repo.ts - ORM: Hibernate, SQLAlchemy, Prisma, TypeORM, Sequelize
- Migrations: Flyway, Liquibase, Alembic, Prisma migrations
Domain Model Indicators
- Directories:
domain/,model/,entity/,entities/ - Files:
*Entity.java,models.py,*.entity.ts - Patterns:
@Entity,class Model, aggregates, value objects
Service Layer Indicators
- Directories:
service/,services/,usecase/,application/ - Files:
*Service.java,*_service.py,*.service.ts - Patterns:
@Service,@Transactional, business logic methods
API Layer Indicators
- Directories:
controller/,api/,rest/,routes/,graphql/ - Files:
*Controller.java,views.py,*.controller.ts - Patterns:
@RestController,@router, route definitions
Messaging Layer Indicators
- Directories:
messaging/,events/,queue/,kafka/,rabbitmq/ - Files:
*Listener.java,*Consumer.py,*.handler.ts - Configs: Kafka, RabbitMQ, SQS configuration
Frontend Layer Indicators
- Directories:
components/,pages/,views/,ui/,src/app/ - Files:
*.tsx,*.vue,*.component.ts - Configs: React, Vue, Angular, Next.js, Nuxt
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: nearform
- Source: nearform/unwind
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.