skills.rest
TomasGC
TomasGCCOMMUNITY
Explore all skills by this author →
GitHub

analyze-code

Analyzes codebases for dead code, security vulnerabilities, complexity, and standards violations.

Updated May 11, 2026
Search Tags:#code quality#static analysis#code analysis#refactoring#security audit#technical debt#dead code
One-click install
npx skills add https://github.com/TomasGC/Meerkat --skill analyze-code-tomasgc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: analyze-code
Source: https://github.com/TomasGC/Meerkat/tree/main/skills/analyze-code
Command: npx skills add https://github.com/TomasGC/Meerkat --skill analyze-code-tomasgc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually reviewing large codebases for quality issues, security vulnerabilities, and technical debt is slow and inconsistent. This Skill automates comprehensive code analysis across multiple languages, producing a prioritized, actionable report. ## Core Features & Use Cases - Dead Code & Duplication Detection: Finds unused functions, variables, imports, unreachable code, and DRY violations using dedicated analysis scripts. - Security & Quality Audits: Validates code against OWASP Top 10, SonarQube quality gates, and language-specific company standards (Go, C#, TypeScript, Vue.js, PowerShell, and more). - Prioritized Reporting: Classifies every issue by severity (Critical/High/Medium/Low) with file paths, line numbers, fix examples, and effort estimates. - Use Case: Before a major refactoring, run the analysis on your repository to receive a report highlighting critical security flaws, quick-win cleanups, and a long-term technical debt reduction plan. ## Quick Start Ask Claude to analyze the codebase for code quality, dead code, and security issues, then review the prioritized report it generates.

Frequently Asked Questions about analyze-code

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find dead code in my codebase?▼

Run the analysis to detect unused functions, variables, imports, unreachable code, and commented-out blocks. It uses scripts like find_unused_code.py to scan Python, TypeScript, and Go files and reports each finding with exact file paths and line numbers.

How to check code quality against SOLID and DRY principles?▼

The analysis validates SOLID principles (God classes, fat interfaces, concrete dependencies) and detects DRY violations via token-based duplication matching with configurable thresholds. Each violation includes a refactoring suggestion with before/after code examples.

What security vulnerabilities does code analysis detect?▼

It checks the OWASP Top 10: injection flaws, broken access control, cryptographic failures, hardcoded secrets, security misconfiguration, and SSRF. It also verifies SonarQube quality gate compliance including security ratings and unresolved hotspots.

Does the code analysis support Go and C# projects?▼

Yes, it enforces language-specific company standards for Go (context usage, repository pattern, naming) and C# (field prefixes, async suffixes, interface naming). It also covers TypeScript, Vue.js 3, PowerShell, JavaScript, SQL, Docker, Kubernetes, and Terraform.

When should I delegate analysis to agents instead of direct analysis?▼

Delegate to agents when the codebase has 100 or more files, exceeds 10,000 lines of code, or spans multiple modules. Agents analyze modules in parallel using local Ollama models, saving 15-20K tokens per analysis, while direct analysis suits smaller codebases.

What are the complexity thresholds enforced during analysis?▼

The enforced limits are cyclomatic complexity under 10, cognitive complexity under 15, nesting depth under 4 levels, functions under 50 lines, and files under 500 lines. Violations are reported with complexity scores and refactoring suggestions.

Related Skills

Explore More Software Engineering Skills→
Leap0920Leap0920
1

claude-md-improver

Audit CLAUDE.md files, score quality, and apply approved diffs.

Community
Intermediate
RohithdgrrRohithdgrr

tech-debt-tracker

Scan codebases for technical debt, prioritize remediation, and track debt trends over time.

Community
Advanced
GainInsightDevGainInsightDev

af-analyse-test-coverage

Analyze test coverage reports to identify untested code paths and gaps.

Official
Intermediate
Devvraj10Devvraj10

security_scan

Orchestrate dependency audit, static code analysis, and dataflow security scans.

Community
Advanced