issue-detection

Detect code issues across security, quality, performance, and maintainability dimensions.

1|1|Updated Dec 25, 2025
One-click install
npx skills add https://github.com/uukuguy/claude-agent-framework --skill issue-detection
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: issue-detection
Source: https://github.com/uukuguy/claude-agent-framework/tree/main/examples/production/07_codebase_analysis/.claude/skills/issue-detection
Command: npx skills add https://github.com/uukuguy/claude-agent-framework --skill issue-detection

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the identification of potential issues within codebases, covering critical areas like security vulnerabilities, code quality, performance bottlenecks, and maintainability concerns.

Core Features & Use Cases

  • Comprehensive Issue Categorization: Analyzes for security flaws (injection, hardcoded credentials), quality problems (complexity, code smells), performance issues (N+1 queries, memory leaks), and maintainability gaps (documentation, test coverage).
  • Structured Reporting: Provides clear, actionable reports with severity, category, location, impact, and suggested fixes.
  • Use Case: Integrate this Skill into your CI/CD pipeline to automatically flag critical security vulnerabilities in new code commits before they reach production.

Quick Start

Use the issue-detection skill to analyze the codebase for critical security vulnerabilities.

Frequently Asked Questions about issue-detection

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate static analysis to detect security vulnerabilities like hardcoded credentials in my code?

Static analysis automates the detection of security vulnerabilities like hardcoded credentials by scanning your codebase. It identifies injection flaws, quality problems, and missing test coverage to provide structured, actionable reports with suggested fixes.

Can I integrate static code analysis into a CI/CD pipeline to flag issues before production?

Yes, you can integrate static code analysis into a CI/CD pipeline to automatically flag critical security vulnerabilities and performance issues in new code commits before they reach production, preventing deployment of flawed code.

What is the best way to detect performance bottlenecks such as N+1 queries and memory leaks?

The best way to detect performance bottlenecks like N+1 queries and memory leaks is through automated static analysis. It scans the codebase to pinpoint performance issues, categorizing them by severity and location with actionable insights.

How does static code analysis identify maintainability gaps and high cyclomatic complexity?

Static code analysis identifies maintainability gaps by evaluating high cyclomatic complexity, missing documentation, and insufficient test coverage. It categorizes these code smells to help developers prioritize refactoring efforts and improve long-term maintainability.

Does static analysis provide actionable reports for fixing code smells and quality issues?

Yes, static analysis provides structured reports for code smells and quality issues. Each report includes severity, category, location, impact, and suggested fixes, enabling developers to quickly resolve identified vulnerabilities and complexity problems.