skills.rest
ibytechaos
ibytechaosCOMMUNITY
Explore all skills by this author →
GitHub

repo-scan

Audits cross-stack source code to classify files, detect embedded third-party libraries, and generate HTML reports.

1|Updated Oct 11, 2025
Search Tags:#refactoring#monorepo#code audit#legacy code#dependency detection#third-party libraries#html report
One-click install
npx skills add https://github.com/ibytechaos/claude --skill repo-scan-ibytechaos
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: repo-scan
Source: https://github.com/ibytechaos/claude/tree/main/plugins/everything-claude-code/skills/repo-scan
Command: npx skills add https://github.com/ibytechaos/claude --skill repo-scan-ibytechaos

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? When taking over a large legacy codebase or monorepo, it is hard to know how much code is actually yours, what third-party libraries are embedded directly in source, and which modules are dead weight. This Skill audits C/C++, Android, iOS, and Web codebases in one pass and delivers per-module verdicts. ## Core Features & Use Cases - Cross-stack file classification: Tags every file as project code, embedded third-party code, or build artifact across C/C++, Java/Android, iOS (OC/Swift), and Web (TS/JS/Vue). - Embedded library detection: Identifies 50+ known libraries (FFmpeg, Boost, OpenSSL) with version extraction from headers, licenses, and directory markers. - Four-level module verdicts: Assigns Core Asset, Extract & Merge, Rebuild, or Deprecate per module, with interactive dark-theme HTML reports and monorepo drill-down. - Use Case: On a 50,000-file C++ monorepo, it found FFmpeg 2.x still in production, a triplicated SDK wrapper, and 636 MB of committed build artifacts. ## Quick Start Ask the agent to run a standard-depth repo-scan audit on your repository and produce the interactive HTML report with per-module verdicts.

Frequently Asked Questions about repo-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a legacy codebase for third-party dependencies?▼

Run a standard-depth scan that classifies every file as project code, third-party, or build artifact. It detects 50+ known libraries like FFmpeg, Boost, and OpenSSL by inspecting directory names, headers, and license files, then reports likely versions.

What tool scans C++, Android, iOS, and Web code in one pass?▼

repo-scan performs cross-stack scanning across C/C++, Java/Android, iOS (Objective-C/Swift), and Web (TS/JS/Vue) in a single audit. It groups files by module and assigns verdicts such as Core Asset, Rebuild, or Deprecate.

Does repo-scan support large monorepos?▼

Yes, it supports hierarchical monorepo scanning with a summary report plus per-sub-project reports. For repos with 100+ modules, start with the fast depth level to get a quick inventory before deeper analysis.

Which analysis depth level should I use for a first audit?▼

Use the standard level, which reads 2-5 files per module and covers full dependency and architecture checks. Use fast for huge directories, deep for modules flagged for refactoring, and full only for pre-merge comprehensive reviews.

Can repo-scan find vendored libraries not declared in package managers?▼

Yes, it specifically targets dependencies embedded directly in source rather than declared in package managers. It inspects headers, license files, and version markers to identify bundled libraries and their likely versions.

Related Skills

Explore More Software Engineering Skills→
MaelwalserMaelwalser

repo-scan

Classify repository files and detect embedded third-party libraries across C/C++, Java/Android, iOS, and Web codebases.

Community
Advanced
hellowind777hellowind777
702

hello-arch

Guides code refactoring, module restructuring, and architecture decisions using SOLID principles.

Community
Intermediate
mitchellvandusen-cellmitchellvandusen-cell

dependency-audit

Audit Python dependencies for CVEs, outdated packages, licenses, and unused imports.

Community
Advanced
dreadnodedreadnode
11

supply-chain-analysis

Analyze dependency closures and generate signed SBOMs for supply chain risks.

Official
Advanced