repo-analysis

Analyzes repository codebases for dependencies, IaC tools, security posture, and cost optimization opportunities, outputting detailed JSON reports.

Updated Oct 6, 2025
One-click install
npx skills add https://github.com/andisab/casdk-harness --skill repo-analysis-andisab
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: repo-analysis
Source: https://github.com/andisab/casdk-harness/tree/main/tests/smoke/iac-team/skills/repo-analysis
Command: npx skills add https://github.com/andisab/casdk-harness --skill repo-analysis-andisab

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pip, pandas, networkx, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of analyzing infrastructure codebases to identify dependencies, security vulnerabilities, cost optimization opportunities, and architectural patterns, thereby enhancing codebase management.

Core Features & Use Cases

  • Service Discovery: Identifies services, applications, and deployment patterns within repositories.
  • Dependency Mapping: Maps service and infrastructure dependencies for thorough understanding.
  • IaC Tool Detection: Identifies IaC tools used, their configurations, and their usage patterns.
  • Security Posture Assessment: Checks for security risks, such as misconfigurations and hardcoded secrets.
  • Cost Optimization Analysis: Identifies right-sizing and optimization opportunities for infrastructure costs.

Quick Start

Use the repo-analysis skill to analyze the infrastructure codebase of your repository.

Frequently Asked Questions about repo-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map infrastructure dependencies in my repository codebase?

Mapping infrastructure dependencies in a repository codebase involves identifying service architectures and IaC tool usage patterns. This skill automates that analysis using Python libraries and file patterns to generate detailed JSON reports of your codebase's infrastructure.

What is infrastructure codebase analysis for security posture assessment?

Infrastructure codebase analysis for security posture assessment is the process of scanning repository code to detect misconfigurations and hardcoded secrets. This skill automates these checks alongside dependency mapping to generate actionable security reports.

How do I find cost optimization opportunities in my infrastructure code?

Finding cost optimization opportunities in infrastructure code requires analyzing repository codebases for right-sizing options. This skill automates infrastructure analysis to identify specific cost reduction opportunities and outputs detailed findings in JSON format.

Does this infrastructure analysis skill require Python and pandas to run?

Yes, this infrastructure analysis skill requires Python environments with pip, pandas, and networkx installed. These dependencies power the service discovery and architectural mapping logic used to scan repository codebases and generate reports.

What is the best way to detect IaC tool usage and configurations in a repository?

The best way to detect IaC tool usage in a repository is through automated codebase analysis that identifies tool configurations and deployment patterns. This skill scans file patterns to detect IaC usage and maps service architectures for detailed reporting.

Can I export infrastructure service discovery results to JSON format?

Yes, you can export infrastructure service discovery results to JSON format. This skill analyzes repository codebases to identify services and deployment patterns, automatically outputting detailed infrastructure reports in structured JSON format.