Install
$ agentstack add skill-xopoko-plug-n-skills-architecture-intelligence ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Architecture Intelligence
Bundled commands use $PLUGIN_ROOT ($env:PLUGIN_ROOT in PowerShell; same path suffix) for the plugin root. Set it once: use the host's plugin-root variable when defined (Claude Code: PLUGIN_ROOT="$CLAUDE_PLUGIN_ROOT"), otherwise the absolute path of this plugin's root directory.
Use for architecture quality in code. Trigger from task context and code evidence: designing a new project or feature, choosing structure, changing boundaries, moving behavior between layers, introducing runtime/integration paths, protecting quality attributes, or reviewing code whose shape affects changeability, reliability, scalability, security, operability, or testability.
Evidence First
Before judging:
- Define system boundary, users/workloads, and the delivery constraint.
- Inspect source evidence: repo guidance, README, manifests, tests, ownership files, architecture docs, ADRs, dependency graph, runtime boundaries, and recent changes.
- Name quality attributes under pressure: modifiability, reliability, scalability, performance, security, observability, testability, cost, operability.
- Frame key scenarios: stimulus, environment, response, response measure.
- Separate observed, inferred, assumed, and unknown.
If context is thin, inspect source first or ask one decision-critical question. Do not invent scale, teams, boundaries, compliance, or domain facts.
Probe
From the plugin root:
python3 "$PLUGIN_ROOT/scripts/architecture_probe.py" --json
python3 "$PLUGIN_ROOT/scripts/architecture_probe.py" --json --git-history
python3 "$PLUGIN_ROOT/scripts/architecture_probe.py" --json --policy
Probe output is an evidence map, not a verdict. It includes:
- structure metrics: fan-in/fan-out, instability, dependency cycles;
- runtime topology: deployment/config/observability/resilience/integration signals;
- ownership topology: CODEOWNERS/OWNERS sources, owner coverage, ownerless areas, cross-owned static dependency edges;
- git history when requested: churn and co-change signals;
- policy checks when provided: forbidden/required top-level edges and required docs.
Route
Use the smallest focused skill set:
codebase-architecture-audit: current architecture, risks, scorecards.architecture-conformance: intended vs observed rules, drift, erosion.architecture-ownership-topology: CODEOWNERS/OWNERS, ownership coverage, cross-owned coordination risk, governance paths.architecture-runtime-topology: deployment, runtime calls, observability, resilience, operability.architecture-decisions: ADR creation/review, tradeoffs, owner, revisit trigger.architecture-fitness-functions: executable guardrails, CI checks, review gates.architecture-refactoring-strategy: incremental migration, blast radius, rollback.
When the current work will create, preserve, or materially change architecture, do not stop at the router. Use this minimum chain:
codebase-architecture-auditfor observed architecture and risks.architecture-refactoring-strategyfor target boundary, slices, rollback.architecture-fitness-functionsfor executable guardrails.
Add architecture-conformance when an architecture doc, ADR, policy, or explicit constraint exists. Add architecture-runtime-topology when CLI, app refresh, background work, deployment, integration, or operability paths change. Add architecture-ownership-topology when owner files, package ownership, or cross-owned dependencies affect the change.
Use adjacent plugins for UI/UX, game design, Kotlin/Tauri specifics, security threat modeling, or non-architecture cleanup.
Evidence Rules
- Tie every finding to files, commands, docs, traces, dependency relations, tests, or decisions.
- Explain tradeoffs; architecture changes rarely improve every quality attribute.
- Recommendations need validation plus rollback or revisit trigger.
- Treat metrics, ownership files, and co-change as warning signals. Confirm against intent, scenarios, runtime evidence, and domain context.
- Do not infer team health, communication quality, production behavior, or branch-protection enforcement from repository files alone.
Refactor Proof Gate
Before editing, capture dirty-tree state, the target boundary, and a pre-refactor probe when the repo can be scanned. After editing, provide tests, docs/ADR updates, runtime smoke or an explicit skip reason, and a post-probe comparison when structural metrics informed the change. End with a skill-usage self-check: skills used, specialized skills skipped, and the reason each skip was safe.
For durable handoff, emit architecture_intelligence.refactor_report.v1.
Durable Contracts
Use references/contracts.md for:
architecture_intelligence.audit.v1architecture_intelligence.conformance.v1architecture_intelligence.decision.v1architecture_intelligence.fitness_plan.v1architecture_intelligence.refactor_report.v1architecture_intelligence.runtime_topology.v1architecture_intelligence.structure_metrics.v1architecture_intelligence.ownership_topology.v1
Boundaries
Do not approve high-risk architecture changes without validation. Do not prescribe microservices, event sourcing, DDD, clean/hexagonal architecture, or new tooling by default. Optimize codebase changeability and runtime qualities, not diagram polish.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Xopoko
- Source: Xopoko/plug-n-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.