Agent skill

Code Quality Analyzer

by alibaba in alibaba/skill-up

Triggered when the user submits code or requests a comprehensive code quality analysis.

Apache-2.0Auto-check passedDevelopment

Install Code Quality Analyzer

skills CLI
$ npx skills add alibaba/skill-up --skill code-quality-analyzer -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install alibaba/skill-up code-quality-analyzer --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/alibaba/skill-up.git skills-src && mkdir -p .claude/skills && cp -r skills-src/e2e/testdata/full-report-pipeline .claude/skills/code-quality-analyzer && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
code-quality-analyzer
GitHub stars
1.1k
Token cost
~306 tokens
SKILL.md length
97 words
Files
15
Skills in repo
7
Repo updated
First seen
Licence
Apache-2.0

At a glance

Triggered when the user submits code or requests a comprehensive code quality analysis.

  • Works in 4 steps: Correctness: logic errors, boundary… → Maintainability: code structure, naming… → Performance: algorithm efficiency,… → …
  • Requests a comprehensive code quality analysis
  • SKILL.md covers Analysis Dimensions, Output Format and Notes
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Code Quality Analyzer is an agent skill from alibaba/skill-up. Triggered when the user submits code or requests a comprehensive code quality analysis. Automatically performs static analysis, code review, and quality scoring. Analysis covers coding standards, potential bugs, performance issues, and security vulnerabilities. Trigger phrases include "analyze code quality", "comprehensive check", "code score".

Its SKILL.md is about 310 tokens, which your agent loads only when the skill is triggered. The skill folder holds 18 other files (for example `README.md`, `evals/cases/error-case.yaml` and `evals/cases/fail-case.yaml`).

It sits in Development, covering Code quality. The repository describes itself as: An evaluation and evolution tool for Agent Skills. The licence is Apache-2.0.

When your agent uses it

  • Requests a comprehensive code quality analysis
  • Phrases include analyze code quality
  • Comprehensive check

Example prompts

  • “analyze code quality”
  • “comprehensive check”
  • “code score”
  • “/code-quality-analyzer”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Correctness: logic errors, boundary conditions, null value handling
  2. Maintainability: code structure, naming conventions, comment completeness
  3. Performance: algorithm efficiency, resource usage, memory management
  4. Security: input validation, injection risks, sensitive data handling

What it can do on your machine

Read from SKILL.md and the folder at commit 9d85640. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Code Quality Analyzer loads about 306 tokens when it runs. Until then it costs about 92 tokens; SKILL.md has 97 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~92
When it runs · the whole SKILL.md, loaded when a task matches
~306

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from alibaba/skill-up at commit 9d85640, republished under its Apache-2.0 licence (© alibaba). 97 words, ~306 tokens.

Download SKILL.mdSave it as .claude/skills/code-quality-analyzer/SKILL.md (or your agent's skills folder). This skill also uses 14 other files; get the full folder from GitHub.
name
code-quality-analyzer
description
Triggered when the user submits code or requests a comprehensive code quality analysis. Automatically performs static analysis, code review, and quality scoring. Analysis covers coding standards, potential bugs, performance issues, and security vulnerabilities. Trigger phrases include "analyze code quality", "comprehensive check", "code score".

Code Quality Analyzer

You are a comprehensive code quality analysis assistant capable of evaluating code along multiple dimensions.

Analysis Dimensions

  1. Correctness: logic errors, boundary conditions, null value handling
  2. Maintainability: code structure, naming conventions, comment completeness
  3. Performance: algorithm efficiency, resource usage, memory management
  4. Security: input validation, injection risks, sensitive data handling

Output Format

Analysis report includes:

  • Overall quality score (1–10)
  • Detailed evaluation for each dimension
  • Specific issue list (with locations and fix suggestions)
  • Improvement priority ranking

Notes

  • Analysis should be objective and evidence-based
  • Identify both strengths and weaknesses
  • Fix suggestions should be directly actionable

© alibaba, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 14 other files in e2e/testdata/full-report-pipeline of alibaba/skill-up.

  • SKILL.md
  • README.md
  • evals/cases/error-case.yaml
  • evals/cases/fail-case.yaml
  • evals/cases/pass-case.yaml
  • evals/cases/skip-case.yaml
  • evals/eval.yaml
  • fixtures/expected/benchmark.json
  • fixtures/expected/eval-metadata.json
  • fixtures/expected/grading-fail.json
  • fixtures/expected/grading-pass.json
  • fixtures/report-input.json
  • report.html
  • report.xml
  • result.json

Open the folder on GitHubat commit 9d85640

Compare with similar skills

Code Quality Analyzer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Code Quality Analyzer compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Code Quality Analyzer this skillalibaba/skill-up1.1k—~306Automated safety check: PassApache-2.0
Install Anti-Slop Oxlint Rulesdmmulroy/anti-slop5.3k1 repos~2.2kAutomated safety check: PassMIT
WooCommerce Code Reviewwoocommerce/woocommerce11k3 repos~1.1kAutomated safety check: PassCustom licence
Systematic Code Refactoringluongnv89/claude-howto42k—~3kAutomated safety check: PassMIT
Constraint-Driven Developmentaddyosmani/agent-skills103k2 repos~5.2kAutomated safety check: PassMIT
Skill Doli Code ReviewDolibarr/dolibarr7.7k1 repos~1.1kAutomated safety check: PassMIT

Similar skills

  • Installs, updates or migrates the vendored anti-slop Oxlint plugin in a repository, keeping local rule changes and the plugin's license and provenance files.

    5.3k GitHub starsUsed in 1 repo~2.2k tokens
    DevelopmentAuto-check passed
  • WooCommerce Code Review

    woocommerce/woocommerce

    Reviews WooCommerce code changes against the project's standards, flagging backend PHP architecture, naming, documentation, data integrity and testing violations.

    11k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed
  • Systematic Code Refactoring

    luongnv89/claude-howto

    Guides refactoring in phases based on Martin Fowler's method: research, test coverage check, planning and small tested steps, with your approval at each phase.

    42k GitHub stars~3k tokensUpdated 8 days ago
    DevelopmentAuto-check passed
  • Constraint-Driven Development

    addyosmani/agent-skills

    Records a project's quality bar in CONSTRAINTS.md and watches diffs for signs an agent quietly weakened it, such as suppressions, skipped tests or lowered thresholds.

    103k GitHub starsUsed in 2 repos~5.2k tokens
    DevelopmentAuto-check passed
  • Skill Doli Code Review

    Dolibarr/dolibarr

    Reviews Dolibarr PHP code for compliance with coding standards and security best practices, and fixes identified issues.

    7.7k GitHub starsUsed in 1 repo~1.1k tokens
    DevelopmentAuto-check passed
  • Ponytail Lazy Developer Mode

    DietrichGebert/ponytail

    Makes the agent pick the laziest solution that works: skip unneeded work, reuse what exists, prefer the standard library and platform features, and keep diffs small.

    158k GitHub stars~871 tokensUpdated today
    DevelopmentAuto-check passed

More from alibaba/skill-up

  • Code Review Assistant

    alibaba/skill-up

    Triggered when the user submits code or requests a code review.

    1.1k GitHub stars~505 tokensUpdated today
    Auto-check passed
  • Data Transformer

    alibaba/skill-up

    Triggered when the user needs to convert data formats, such as CSV to JSON, JSON to YAML, or XML to JSON.

    1.1k GitHub stars~332 tokensUpdated today
    Auto-check passed
  • File Organizer

    alibaba/skill-up

    Triggered when the user needs to organize project files, analyze directory structure, or generate a project report.

    1.1k GitHub stars~374 tokensUpdated today
    Auto-check passed
  • Quick Calculator

    alibaba/skill-up

    Quickly produces accurate calculation results when a user needs arithmetic, unit conversion, or mathematical formula solving.

    1.1k GitHub stars~252 tokensUpdated today
    Auto-check passed
  • Mood Booster

    alibaba/skill-up

    Triggered when the user expresses boredom, low mood, frustration, irritation, or a need to relax.

    1.1k GitHub stars~372 tokensUpdated today
    Auto-check passed
  • Sdd Riper

    alibaba/skill-up

    SDD-RIPER workflow executor with phase gating. An agent skill from alibaba/skill-up.

    1.1k GitHub stars~117 tokensUpdated today
    Auto-check passed

Categories

Questions about Code Quality Analyzer

What does Code Quality Analyzer do?

Triggered when the user submits code or requests a comprehensive code quality analysis. Code Quality Analyzer is an agent skill from alibaba/skill-up. Triggered when the user submits code or requests a comprehensive code quality analysis.

When should I use Code Quality Analyzer?

Code Quality Analyzer fits situations like: requests a comprehensive code quality analysis; phrases include analyze code quality; comprehensive check.

How do I install Code Quality Analyzer in Claude Code?

Run `npx skills add alibaba/skill-up --skill code-quality-analyzer -a claude-code`. Or copy the skill folder (e2e/testdata/full-report-pipeline in alibaba/skill-up) into .claude/skills/code-quality-analyzer in your project. Claude Code loads it when a task matches its description.

How do I install Code Quality Analyzer in Codex?

Run `npx skills add alibaba/skill-up --skill code-quality-analyzer -a codex`. Or copy the skill folder (e2e/testdata/full-report-pipeline in alibaba/skill-up) into .agents/skills/code-quality-analyzer in your project. Codex loads it when a task matches its description.

Can I use Code Quality Analyzer in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add alibaba/skill-up --skill code-quality-analyzer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/code-quality-analyzer, .gemini/skills/code-quality-analyzer, .github/skills/code-quality-analyzer and .opencode/skills/code-quality-analyzer in your project.

What does Code Quality Analyzer need to run?

SKILL.md names no scripts, command-line tools or credentials: Code Quality Analyzer is instructions for the agent only.

Does Code Quality Analyzer access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Code Quality Analyzer safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Code Quality Analyzer use?

Code Quality Analyzer is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Code Quality Analyzer use?

About 306 tokens (SKILL.md is roughly 1.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Code Quality Analyzer?

Skills that share tags, products or a category with Code Quality Analyzer: Install Anti-Slop Oxlint Rules (dmmulroy/anti-slop, 5.3k stars), WooCommerce Code Review (woocommerce/woocommerce, 11k stars), Systematic Code Refactoring (luongnv89/claude-howto, 42k stars) and Constraint-Driven Development (addyosmani/agent-skills, 103k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Code Quality Analyzer?

alibaba (a GitHub organization) maintains it in alibaba/skill-up, which has 1,148 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on October 8, 2026.

Source: alibaba/skill-up on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.