analyze-code

Analyze Spring Boot Kotlin WebFlux codebases for quality, security, performance, and architecture issues.

Updated Dec 11, 2025
One-click install
npx skills add https://github.com/semicolon-devteam/semo --skill analyze-code-semicolon-devteam
Or copy as Structured Prompt for Agentโ–ผ
Please help me install this Agent Skill.
Skill: analyze-code
Source: https://github.com/semicolon-devteam/semo/tree/main/packages/eng/spring/skills/analyze-code
Command: npx skills add https://github.com/semicolon-devteam/semo --skill analyze-code-semicolon-devteam

SYSTEM DOCUMENTATION & REQUIREMENTS

๐Ÿ’ก This Skill includes references (resource) components.

What problem does it solve?

์ฝ”๋“œ๋ฒ ์ด์Šค๋ฅผ ๋‹ค๊ฐ๋„๋กœ ๋ถ„์„ํ•ด ๋ฌธ์ œ์ ๊ณผ ๊ฐœ์„  ๊ธฐํšŒ๋ฅผ ์‹๋ณ„ํ•ฉ๋‹ˆ๋‹ค.

Core Features & Use Cases

  • Quality ๋ถ„์„: ๋ณต์žก๋„/์ค‘๋ณต/์Šค๋ฉœ ํƒ์ง€
  • Security ์Šค์บ”: OWASP Top 10 ์ทจ์•ฝ์  ์˜ˆ์ธก
  • Performance ์ง„๋‹จ: N+1/๋ธ”๋กœํ‚น ์—ฌ๋ถ€ ์ ๊ฒ€
  • Architecture ๊ฒ€ํ† : ๋ ˆ์ด์–ด ์˜์กด์„ฑ ๋ฐ SOLID ํ™•์ธ

Quick Start

์ฝ”๋“œ ์ „๋ฐ˜์— ๋Œ€ํ•œ ๋ถ„์„ ๋ฆฌํฌํŠธ๋ฅผ ์ƒ์„ฑํ•ฉ๋‹ˆ๋‹ค.

Frequently Asked Questions about analyze-code

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze code quality, security, and performance issues in a Spring Boot codebase?โ–ผ

Code analysis identifies quality issues like complexity and duplication, security vulnerabilities matching OWASP Top 10, performance bottlenecks such as N+1 queries, and architectural violations. The Skill scans your codebase end-to-end and delivers prioritized findings with an improvement roadmap.

Can I detect security vulnerabilities and OWASP risks in my Kotlin WebFlux application?โ–ผ

Yes. The Skill performs security scanning to predict OWASP Top 10 vulnerabilities specific to Kotlin and WebFlux patterns, flagging risky code structures and providing remediation guidance alongside quality and performance metrics.

What performance issues can be detected in reactive Spring Boot code?โ–ผ

Performance diagnosis checks for N+1 query problems and blocking operations in reactive contexts. The Skill identifies code patterns that violate non-blocking principles and architectural assumptions, preventing latency and throughput degradation.

How does architecture review work for Spring Boot projects?โ–ผ

Architecture review validates layer dependencies and SOLID principle compliance. The analysis reports on dependency violations, coupling issues, and structural misalignment so you can refactor toward maintainable, scalable design.

What output does a codebase analysis provide?โ–ผ

Analysis delivers dashboards showing findings by category, prioritized issue lists, actionable remediation steps, and a roadmap ranking improvements by impact. All results are structured for CLI-driven workflows and decision-making.

Do I need special setup to analyze an existing Spring Boot project?โ–ผ

No external dependencies are required. The Skill works with any Spring Boot, Kotlin, and WebFlux codebase through CLI-driven discovery and scanning without additional tools or configuration.