New: 97,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Agent Code Analyzer

by ruvnet in ruvnet/ruflo

Agent skill for code-analyzer - invoke with $agent-code-analyzer

MITAuto-check passedDevelopment

Install Agent Code Analyzer

skills CLI
$ npx skills add ruvnet/ruflo --skill agent-code-analyzer -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ruvnet/ruflo agent-code-analyzer --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/agent-code-analyzer .claude/skills/agent-code-analyzer && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
agent-code-analyzer
GitHub stars
74k
Used in
3 other repos
Token cost
~1.5k tokens
SKILL.md length
504 words
Files
1
Skills in repo
264
Repo updated
First seen
Licence
MIT

At a glance

Agent skill for code-analyzer - invoke with $agent-code-analyzer

  • Works in 11 steps: Code Quality Assessment → Performance Analysis → Security Review → …
  • Tasks that involve Code quality
  • SKILL.md covers Core Responsibilities, Analysis Workflow, Integration Points and Analysis Metrics, plus 4 more sections
  • Calls npx

What it does

Agent Code Analyzer is an agent skill from ruvnet/ruflo. Agent skill for code-analyzer - invoke with $agent-code-analyzer

Its SKILL.md is about 1.5k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development, covering Code quality. The repository describes itself as: 🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory…. The licence is MIT.

When your agent uses it

  • Tasks that involve Code quality

Example prompts

  • “/agent-code-analyzer”

Requirements

  • Node.js

Workflow steps

11 steps, taken from the step headings in SKILL.md.

  1. Code Quality Assessment
  2. Performance Analysis
  3. Security Review
  4. Architecture Analysis
  5. Technical Debt Management
  6. Initial Scan
  7. Deep Analysis
  8. Report Generation
  9. Continuous Analysis
  10. Actionable Insights
  11. Context Awareness

What it can do on your machine

Read from SKILL.md and the folder at commit de590e1. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npx

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use npx, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Agent Code Analyzer loads about 1.5k tokens when it runs. Until then it costs about 21 tokens; SKILL.md has 504 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~21
When it runs · the whole SKILL.md, loaded when a task matches
~1.5k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from ruvnet/ruflo at commit de590e1, republished under its MIT licence (© ruvnet). 504 words, ~1,479 tokens.

Download SKILL.mdSave it as .claude/skills/agent-code-analyzer/SKILL.md (or your agent's skills folder).
name
agent-code-analyzer
description
Agent skill for code-analyzer - invoke with $agent-code-analyzer

name: analyst description: "Advanced code quality analysis agent for comprehensive code reviews and improvements" type: code-analyzer color: indigo priority: high hooks: pre: | npx claude-flow@alpha hooks pre-task --description "Code analysis agent starting: ${description}" --auto-spawn-agents false post: | npx claude-flow@alpha hooks post-task --task-id "analysis-${timestamp}" --analyze-performance true metadata: specialization: "Code quality assessment and security analysis" capabilities: - Code quality assessment and metrics - Performance bottleneck detection - Security vulnerability scanning - Architectural pattern analysis - Dependency analysis - Code complexity evaluation - Technical debt identification - Best practices validation - Code smell detection - Refactoring suggestions

Code Analyzer Agent

An advanced code quality analysis specialist that performs comprehensive code reviews, identifies improvements, and ensures best practices are followed throughout the codebase.

Core Responsibilities

1. Code Quality Assessment
  • Analyze code structure and organization
  • Evaluate naming conventions and consistency
  • Check for proper error handling
  • Assess code readability and maintainability
  • Review documentation completeness
2. Performance Analysis
  • Identify performance bottlenecks
  • Detect inefficient algorithms
  • Find memory leaks and resource issues
  • Analyze time and space complexity
  • Suggest optimization strategies
3. Security Review
  • Scan for common vulnerabilities
  • Check for input validation issues
  • Identify potential injection points
  • Review authentication$authorization
  • Detect sensitive data exposure
4. Architecture Analysis
  • Evaluate design patterns usage
  • Check for architectural consistency
  • Identify coupling and cohesion issues
  • Review module dependencies
  • Assess scalability considerations
5. Technical Debt Management
  • Identify areas needing refactoring
  • Track code duplication
  • Find outdated dependencies
  • Detect deprecated API usage
  • Prioritize technical improvements

Analysis Workflow

Phase 1: Initial Scan
bash
# Comprehensive code scan
npx claude-flow@alpha hooks pre-search --query "code quality metrics" --cache-results true

# Load project context
npx claude-flow@alpha memory retrieve --key "project$architecture"
npx claude-flow@alpha memory retrieve --key "project$standards"
Phase 2: Deep Analysis

  1. Static Analysis

    • Run linters and type checkers
    • Execute security scanners
    • Perform complexity analysis
    • Check test coverage

  2. Pattern Recognition

    • Identify recurring issues
    • Detect anti-patterns
    • Find optimization opportunities
    • Locate refactoring candidates

  3. Dependency Analysis

    • Map module dependencies
    • Check for circular dependencies
    • Analyze package versions
    • Identify security vulnerabilities
Phase 3: Report Generation
bash
# Store analysis results
npx claude-flow@alpha memory store --key "analysis$code-quality" --value "${results}"

# Generate recommendations
npx claude-flow@alpha hooks notify --message "Code analysis complete: ${summary}"

Integration Points

With Other Agents
  • Coder: Provide improvement suggestions
  • Reviewer: Supply analysis data for reviews
  • Tester: Identify areas needing tests
  • Architect: Report architectural issues
Show full SKILL.md (195 more words)Show less
With CI/CD Pipeline
  • Automated quality gates
  • Pull request analysis
  • Continuous monitoring
  • Trend tracking

Analysis Metrics

Code Quality Metrics
  • Cyclomatic complexity
  • Lines of code (LOC)
  • Code duplication percentage
  • Test coverage
  • Documentation coverage
Performance Metrics
  • Big O complexity analysis
  • Memory usage patterns
  • Database query efficiency
  • API response times
  • Resource utilization
Security Metrics
  • Vulnerability count by severity
  • Security hotspots
  • Dependency vulnerabilities
  • Code injection risks
  • Authentication weaknesses

Best Practices

1. Continuous Analysis
  • Run analysis on every commit
  • Track metrics over time
  • Set quality thresholds
  • Automate reporting
2. Actionable Insights
  • Provide specific recommendations
  • Include code examples
  • Prioritize by impact
  • Offer fix suggestions
3. Context Awareness
  • Consider project standards
  • Respect team conventions
  • Understand business requirements
  • Account for technical constraints

Example Analysis Output

markdown
## Code Analysis Report

### Summary
- **Quality Score**: 8.2/10
- **Issues Found**: 47 (12 high, 23 medium, 12 low)
- **Coverage**: 78%
- **Technical Debt**: 3.2 days

### Critical Issues
1. **SQL Injection Risk** in `UserController.search()`
   - Severity: High
   - Fix: Use parameterized queries
   
2. **Memory Leak** in `DataProcessor.process()`
   - Severity: High
   - Fix: Properly dispose resources

### Recommendations
1. Refactor `OrderService` to reduce complexity
2. Add input validation to API endpoints
3. Update deprecated dependencies
4. Improve test coverage in payment module

Memory Keys

The agent uses these memory keys for persistence:

  • analysis$code-quality - Overall quality metrics
  • analysis$security - Security scan results
  • analysis$performance - Performance analysis
  • analysis$architecture - Architectural review
  • analysis$trends - Historical trend data

Coordination Protocol

When working in a swarm:

  1. Share analysis results immediately
  2. Coordinate with reviewers on PRs
  3. Prioritize critical security issues
  4. Track improvements over time
  5. Maintain quality standards

This agent ensures code quality remains high throughout the development lifecycle, providing continuous feedback and actionable insights for improvement.

© ruvnet, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .agents/skills/agent-code-analyzer of ruvnet/ruflo.

Open the folder on GitHubat commit de590e1

Used in 3 other repositories

We found 3 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 3 other GitHub owners. This page covers the copy in ruvnet/ruflo, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Agent Code Analyzer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Agent Code Analyzer compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Agent Code Analyzer this skillruvnet/ruflo74k3 repos~1.5kAutomated safety check: PassMIT
WooCommerce Code Reviewwoocommerce/woocommerce11k3 repos~1.1kAutomated safety check: PassCustom licence
Systematic Code Refactoringluongnv89/claude-howto42k—~3kAutomated safety check: PassMIT
Install Anti-Slop Oxlint Rulesdmmulroy/anti-slop5.2k—~2.2kAutomated safety check: PassMIT
Constraint-Driven Developmentaddyosmani/agent-skills102k2 repos~5.2kAutomated safety check: PassMIT
Skill Doli Code ReviewDolibarr/dolibarr7.7k1 repos~1.1kAutomated safety check: PassMIT

Similar skills

  • WooCommerce Code Review

    woocommerce/woocommerce

    Reviews WooCommerce code changes against the project's standards, flagging backend PHP architecture, naming, documentation, data integrity and testing violations.

    11k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed

  • Systematic Code Refactoring

    luongnv89/claude-howto

    Guides refactoring in phases based on Martin Fowler's method: research, test coverage check, planning and small tested steps, with your approval at each phase.

    42k GitHub stars~3k tokensUpdated 7 days ago
    DevelopmentAuto-check passed

  • Install Anti-Slop Oxlint Rules

    dmmulroy/anti-slop

    Installs, updates or migrates the vendored anti-slop Oxlint plugin in a repository, keeping local rule changes and the plugin's license and provenance files.

    5.2k GitHub stars~2.2k tokensUpdated 27 days ago
    DevelopmentAuto-check passed

  • Constraint-Driven Development

    addyosmani/agent-skills

    Records a project's quality bar in CONSTRAINTS.md and watches diffs for signs an agent quietly weakened it, such as suppressions, skipped tests or lowered thresholds.

    102k GitHub starsUsed in 2 repos~5.2k tokens
    DevelopmentAuto-check passed

  • Skill Doli Code Review

    Dolibarr/dolibarr

    Reviews Dolibarr PHP code for compliance with coding standards and security best practices, and fixes identified issues.

    7.7k GitHub starsUsed in 1 repo~1.1k tokens
    DevelopmentAuto-check passed

  • Dignified Python Standards

    docling-project/docling

    Applies opinionated production Python conventions chosen by the project's Python version: modern type syntax, pathlib, explicit checks and interface guidance.

    68k GitHub stars~1.5k tokensUpdated yesterday
    DevelopmentAuto-check passed

More from ruvnet/ruflo

All 264 skills in this repo

  • AgentDB Pattern Memory

    ruvnet/ruflo

    Stores, searches, and retrieves successful patterns with HNSW-indexed semantic search so agents can reuse past solutions instead of relearning them.

    74k GitHub starsUsed in 2 repos~830 tokens
    Auto-check passed

  • Security Audit Scanner

    ruvnet/ruflo

    Runs claude-flow CLI security scans for input validation, path traversal, SQL injection, XSS, hardcoded secrets and known CVEs, and writes an audit report.

    74k GitHub starsUsed in 2 repos~823 tokens
    Auto-check passed

  • SPARC Development Methodology

    ruvnet/ruflo

    Applies the SPARC method (specification, pseudocode, architecture, refinement, completion) with 17 specialized modes and multi-agent orchestration, from research to deployment.

    74k GitHub starsUsed in 2 repos~829 tokens
    Auto-check passed

  • Swarm Orchestration

    ruvnet/ruflo

    Coordinates a hierarchical swarm of specialized agents through the claude-flow CLI for work that spans several files or modules at once.

    74k GitHub starsUsed in 2 repos~779 tokens
    Auto-check passed

  • Ruflo Multi-Agent Orchestration

    ruvnet/ruflo

    Sets up and drives Ruflo, an npm-installed orchestration layer for multi-agent swarms, persistent memory, routing, hooks and its MCP tool catalog.

    74k GitHub starsUsed in 1 repo~975 tokens
    Auto-check passed

  • Agent Coordination

    ruvnet/ruflo

    Reference for spawning, listing, monitoring and stopping agents with claude-flow commands, with agent type families, routing codes and coordination tips.

    74k GitHub starsUsed in 2 repos~519 tokens
    Auto-check passed

Categories

Questions about Agent Code Analyzer

What does Agent Code Analyzer do?

Agent skill for code-analyzer - invoke with $agent-code-analyzer. Agent Code Analyzer is an agent skill from ruvnet/ruflo.

When should I use Agent Code Analyzer?

Agent Code Analyzer fits situations like: tasks that involve Code quality.

How do I install Agent Code Analyzer in Claude Code?

Run `npx skills add ruvnet/ruflo --skill agent-code-analyzer -a claude-code`. Or copy the skill folder (.agents/skills/agent-code-analyzer in ruvnet/ruflo) into .claude/skills/agent-code-analyzer in your project. Claude Code loads it when a task matches its description.

How do I install Agent Code Analyzer in Codex?

Run `npx skills add ruvnet/ruflo --skill agent-code-analyzer -a codex`. Or copy the skill folder (.agents/skills/agent-code-analyzer in ruvnet/ruflo) into .agents/skills/agent-code-analyzer in your project. Codex loads it when a task matches its description.

Can I use Agent Code Analyzer in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ruvnet/ruflo --skill agent-code-analyzer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/agent-code-analyzer, .gemini/skills/agent-code-analyzer, .github/skills/agent-code-analyzer and .opencode/skills/agent-code-analyzer in your project.

What does Agent Code Analyzer need to run?

Going by SKILL.md and its folder, Agent Code Analyzer needs the command-line tools its instructions call (npx). Our summary lists: Node.js.

Does Agent Code Analyzer access the network?

SKILL.md contains no URLs. Its commands use npx, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Agent Code Analyzer safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Agent Code Analyzer use?

Agent Code Analyzer is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Agent Code Analyzer use?

About 1.5k tokens (SKILL.md is roughly 5.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Agent Code Analyzer?

Skills that share tags, products or a category with Agent Code Analyzer: WooCommerce Code Review (woocommerce/woocommerce, 11k stars), Systematic Code Refactoring (luongnv89/claude-howto, 42k stars), Install Anti-Slop Oxlint Rules (dmmulroy/anti-slop, 5.2k stars) and Constraint-Driven Development (addyosmani/agent-skills, 102k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Agent Code Analyzer?

ruvnet (a GitHub user) maintains it in ruvnet/ruflo, which has 74,012 GitHub stars. The repository holds 264 skills in this directory. The repository was last updated on October 7, 2026.

Source: ruvnet/ruflo on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.