skills.rest
GiantCroissant-Lunar
GiantCroissant-LunarOFFICIAL
Explore all skills by this author →
GitHub

code-analyze

Orchestrate static analysis, security scanning, and dependency checks for .NET codebases.

Updated Aug 27, 2026
Search Tags:#dotnet#code-quality#static-analysis#analyze#Roslyn#dependency-check#security-scan
One-click install
npx skills add https://github.com/GiantCroissant-Lunar/fantasim-world --skill code-analyze-giantcroissant-lunar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-analyze
Source: https://github.com/GiantCroissant-Lunar/fantasim-world/tree/main/.agent/skills/code-analyze
Command: npx skills add https://github.com/GiantCroissant-Lunar/fantasim-world --skill code-analyze-giantcroissant-lunar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires dotnet, pre-commit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill automates comprehensive code quality checks for .NET projects by orchestrating static analysis, security scanning, and dependency auditing.

Core Features & Use Cases

  • Static Code Analysis: Leverages Roslyn analyzers and StyleCop to surface quality and style issues during build.
  • Security Scanning: Integrates secret detection (gitleaks, detect-secrets) and CA5xxx static analyzers to identify vulnerabilities.
  • Dependency Checks: Queries NuGet packages for vulnerabilities and outdated versions, supporting maintenance.
  • Use Case: A developer integrates this skill into CI to guarantee pull requests meet security and quality gates before merging.

Quick Start

Run the full analysis suite using the included script: ./scripts/analyze.sh --all

Frequently Asked Questions about code-analyze

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static analysis and security scans on a .NET project?▼

Run static analysis and security scans on .NET projects by executing scripts like `./scripts/analyze.sh --all`. This orchestrates Roslyn analyzers, StyleCop, and gitleaks to surface code quality issues and secret vulnerabilities without modifying source.

What does Roslyn static analysis check in C# codebases?▼

Roslyn static analysis checks C# codebases for quality and style issues using Roslyn analyzers and StyleCop. It surfaces violations during the build process to enforce code quality gates before merging.

Can I check NuGet packages for vulnerabilities and outdated versions in CI?▼

Yes, you can check NuGet packages for vulnerabilities and outdated versions in CI workflows. Dependency checks query NuGet packages to support maintenance and ensure dependency health before merging pull requests.

Does pre-commit work with dotnet tooling for secret detection?▼

Yes, pre-commit works with dotnet tooling by using hooks to integrate gitleaks and detect-secrets. This performs security scanning to identify vulnerabilities and secrets without modifying source files.

Why use pre-commit hooks for .NET code quality checks?▼

Use pre-commit hooks for .NET code quality checks to automate comprehensive analysis before commits. This guarantees pull requests meet security and quality gates by orchestrating static analysis, secret detection, and dependency auditing.

Related Skills

Explore More Software Engineering Skills→
icartshicartsh
4

code-format

Format C#/.NET, JSON, YAML, Markdown, JavaScript, and TypeScript files using dotnet format and Prettier.

Community
Advanced
xvawlxvawl
1

pre-merge-checklist

Validate Python and TypeScript PRs against linting, typing, tests, and documentation.

Community
Intermediate
managedcodemanagedcode
466

dotnet-stylecop-analyzers

Integrate StyleCop.Analyzers into .NET projects with .editorconfig and stylecop.json configuration.

Official
Intermediate
ademceperademceper

dependency-analyzer

Analyze NuGet packages and .NET project dependencies for vulnerabilities, updates, and conflicts.

Community
Intermediate