project-scanner

Audit Node.js and TypeScript codebases for dependencies, type errors, and vulnerabilities.

3|Updated Aug 3, 2025
One-click install
npx skills add https://github.com/CleanExpo/Synthex --skill project-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: project-scanner
Source: https://github.com/CleanExpo/Synthex/tree/main/.claude/skills/project-scanner
Command: npx skills add https://github.com/CleanExpo/Synthex --skill project-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, and includes scripts (resource) components.

What problem does it solve?

The project-scanner automates time-consuming manual codebase reviews by mapping file structure, surfacing TypeScript and dependency issues, detecting unused exports, and identifying security and documentation gaps so teams can prioritize work and reduce technical debt.

Core Features & Use Cases

  • File Structure Mapping: Traverse the repository to catalog files, module boundaries, and untracked or orphaned files.
  • Dependency & Security Audit: Flag outdated or vulnerable packages, missing peer deps, and critical CVEs using npm audit and depcheck patterns.
  • TypeScript & Architecture Checks: Run type checks, detect circular dependencies, layer violations, and unused exports to improve reliability.
  • Use Case: Run against the Synthex Node.js/TypeScript codebase to produce a prioritized health report that developers and engineering managers can act on.

Quick Start

Run the project-scanner to generate a prioritized health score and action plan for the Synthex repository.

Frequently Asked Questions about project-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a TypeScript codebase for unused exports and circular dependencies?

Auditing a TypeScript codebase for unused exports and circular dependencies involves mapping module boundaries and running type checks to detect architectural violations, generating a prioritized health score and categorized findings for actionable remediation.

What does an automated dependency and security audit check for in a Node.js project?

An automated dependency and security audit checks Node.js projects for vulnerable packages, missing peer dependencies, and critical CVEs using npm audit and depcheck patterns, flagging security gaps to reduce technical debt.

Can I use this scanner on a project deployed on Vercel with a Prisma schema?

Yes, the scanner explicitly supports Node.js and TypeScript projects deployed on Vercel and using Prisma schemas, inventorying configuration files and mapping dependencies to assess architectural quality and health.

How do I fix TypeScript errors and reduce technical debt in my repository?

Fixing TypeScript errors and reducing technical debt requires running tsc --noEmit to surface type safety issues, then following an actionable remediation plan that prioritizes architectural fixes and documentation coverage gaps.

Does the codebase audit work without installing additional packages besides requests?

Yes, the audit requires only the requests dependency to operate, leveraging existing project manifests and tools like npx depcheck, npm audit, and tsc --noEmit to map files and inventory configurations without adding extra packages.