scan-boundaries

Detect cross-app and cross-package import violations in a monorepo.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/TrevorPLam/agency --skill scan-boundaries
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: scan-boundaries
Source: https://github.com/TrevorPLam/agency/tree/main/.windsurf/skills/scan-boundaries
Command: npx skills add https://github.com/TrevorPLam/agency --skill scan-boundaries

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps identify and report import violations that cross apps or packages within a monorepo, ensuring architectural boundaries are respected.

Core Features & Use Cases

  • Automated Boundary Discovery: Scans for forbidden cross-app and cross-package imports using fast pattern matching, enabling early detection during architectural reviews.
  • Deterministic Deduplication & Issue Tracking: Hashes findings to avoid duplicates and appends new issues to tasks/issues.md with a structured template for traceability.
  • Guided Remediation: Provides a reproducible workflow for triaging violations and enforcing export boundaries across apps.

Quick Start

Run the scan commands exactly as shown and review the resulting issues in tasks/issues.md.

Frequently Asked Questions about scan-boundaries

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect cross-package import violations in a monorepo?

To detect cross-package import violations in a monorepo, run an automated scan using ripgrep to identify forbidden app-to-app imports, disallowed relative paths, and improper package exports across architectural boundaries.

How does static analysis handle duplicate import boundary issues?

Static analysis handles duplicate import boundary issues by hashing findings to deduplicate results. This deterministic approach avoids duplicates and appends only new issues to tasks/issues.md with a structured template for traceability.

What is the best way to enforce architectural boundaries across apps?

The best way to enforce architectural boundaries across apps is to use deterministic static analysis to spot cross-app imports that violate boundaries. This provides a reproducible workflow for triaging violations and enforcing export boundaries.

Can I use ripgrep to scan for disallowed relative paths in a monorepo?

Yes, you can use ripgrep to scan for disallowed relative paths in a monorepo. The scan uses fast pattern matching with ripgrep to target and identify improper package exports and relative path violations.

What are the limitations of automated boundary scanning for large monorepos?

A limitation of automated boundary scanning for large monorepos is the strict 30-second timeout enforced during the ripgrep scan. This prevents indefinite execution but may truncate analysis on exceptionally large codebases.