Agent skill

Analyze

by softspark in softspark/ai-toolkit

Analyzes code quality, complexity, patterns across codebase.

Apache-2.0Auto-check passedDevelopment

Install Analyze

skills CLI
$ npx skills add softspark/ai-toolkit --skill analyze -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install softspark/ai-toolkit analyze --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/softspark/ai-toolkit.git skills-src && mkdir -p .claude/skills && cp -r skills-src/app/skills/analyze .claude/skills/analyze && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
analyze
GitHub stars
179
Token cost
~1k tokens
SKILL.md length
384 words
Files
2 (incl. scripts)
Skills in repo
112
Repo updated
First seen
Licence
Apache-2.0

At a glance

Analyzes code quality, complexity, patterns across codebase.

  • Works in 4 steps: Scans codebase or specific path → Analyzes code quality metrics → Identifies patterns and anti-patterns → …
  • Tasks that involve Code quality
  • SKILL.md covers Usage, What This Command Does, Analysis Types and Output Format, plus 7 more sections
  • Runs Python scripts from its folder; calls python3 and mypy

What it does

Analyze is an agent skill from softspark/ai-toolkit. Analyzes code quality, complexity, patterns across codebase. Triggers: quality report, hotspot scan, code analysis, architecture signal.

Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including scripts (for example `scripts/complexity.py`).

It sits in Development, covering Code quality and Linting and formatting. The repository describes itself as: Professional-grade AI coding toolkit: 94 skills, 44 agents, multi-platform (Claude, Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, Augment, Antigravity, Codex CLI… The licence is Apache-2.0.

When your agent uses it

  • Tasks that involve Code quality
  • Tasks that involve Linting and formatting

Example prompts

  • “Use the analyze skill to analyz code quality, complexity, patterns across codebase”
  • “/analyze”

Requirements

  • Python 3
  • Pre-approved tools (allowed-tools): Read, Grep, Glob

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Scans codebase or specific path
  2. Analyzes code quality metrics
  3. Identifies patterns and anti-patterns
  4. Reports findings with recommendations

What it can do on your machine

Read from SKILL.md and the folder at commit d64db2b. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Glob

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Python), which the agent can run.

    Shell commands in SKILL.md call:

    • python3
    • mypy

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Analyze loads about 1k tokens when it runs. Until then it costs about 36 tokens; SKILL.md has 384 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~36
When it runs · the whole SKILL.md, loaded when a task matches
~1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from softspark/ai-toolkit at commit d64db2b, republished under its Apache-2.0 licence (© softspark). 384 words, ~1,010 tokens.

Download SKILL.mdSave it as .claude/skills/analyze/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
analyze
description
Analyzes code quality, complexity, patterns across codebase. Triggers: quality report, hotspot scan, code analysis, architecture signal.
allowed-tools
Read, Grep, Glob
user-invocable
true
effort
medium
argument-hint
[path or pattern]

Code Analysis

$ARGUMENTS

Analyze code quality, complexity, and patterns.

Usage

/analyze [path] [--type=<type>]

What This Command Does

  1. Scans codebase or specific path
  2. Analyzes code quality metrics
  3. Identifies patterns and anti-patterns
  4. Reports findings with recommendations

Analysis Types

TypeDescription
qualityCode quality metrics (default)
securitySecurity vulnerability scan
complexityCyclomatic complexity
dependenciesDependency analysis
coverageTest coverage gaps

Output Format

markdown
## Code Analysis Report

### Summary
- **Files Analyzed**: [count]
- **Issues Found**: [count]
- **Quality Score**: [score]/100

### Metrics
| Metric | Value | Threshold |
|--------|-------|-----------|
| Complexity | [avg] | <10 |
| Duplication | [%] | <5% |
| Coverage | [%] | >70% |

### Issues by Severity
- Critical: [count]
- High: [count]
- Medium: [count]
- Low: [count]

### Top Issues
1. **[Issue]** - [file:line]
   - [Description]
   - Fix: [Recommendation]

### Patterns Detected
- [Pattern 1]: [locations]
- [Pattern 2]: [locations]

### Recommendations
1. [Recommendation with priority]

Automated Complexity Analysis

Run the bundled script for a quick complexity report:

bash
python3 ${CLAUDE_SKILL_DIR}/scripts/complexity.py .

Reports file counts by type, largest files, TODO/FIXME counts, and total code lines.

Common Rationalizations

ExcuseWhy It's Wrong
"The linter is green, the code is fine"Linters catch syntax, not design flaws — analysis covers architecture and patterns
"We know where the problems are"Intuition misses systemic issues — data-driven analysis reveals hidden hotspots
"Analysis takes too long"A 5-minute scan prevents weeks of debugging — front-load the investment
"It's legacy code, analysis won't help"Legacy code benefits most — find the critical paths before they break

Tools Used

LanguageTools
Pythonruff, mypy, pylint
JavaScripteslint, tsc
Gogolangci-lint
Rustclippy

Rules

  • MUST report measured values — never assert "this is fine" without numbers
  • NEVER modify source files (read-only skill)
  • CRITICAL: if the requested analysis type is unsupported for the detected language, say so explicitly and stop — do not fake metrics
Show full SKILL.md (174 more words)Show less

Gotchas

  • Linters that exit 0 still may have skipped files (gitignore rules, no-match patterns, parse errors). Always read the "N files checked" line before reporting "clean".
  • Coverage percentages silently exclude generated code, migrations, and __init__.py by default. Report coverage with the exclude list, not the headline number alone.
  • ruff and pylint disagree on several rules (line length, import order) — pick one as the source of truth for the project and note the choice in the report.
  • mypy --strict on a codebase that was not authored under strict mode will return hundreds of spurious findings. Start with --ignore-missing-imports and a file allowlist before claiming the codebase is untyped.

When NOT to Use

  • For a single-PR code review — use /review instead
  • For fixing a specific bug — use /debug or /fix
  • For architectural friction and module design — use /architecture-audit
  • For a vulnerability scan of dependencies — use /cve-scan
  • Found quality issues? → /refactor to fix them systematically
  • Security issues detected? → /cve-scan for dependency audit
  • Want deeper architecture review? → /architecture-audit for friction discovery
  • Performance hotspots found? → /workflow performance-optimization

© softspark, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (scripts) in app/skills/analyze of softspark/ai-toolkit.

  • SKILL.md
  • scripts/complexity.py

Open the folder on GitHubat commit d64db2b

Compare with similar skills

Analyze next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Analyze compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Analyze this skillsoftspark/ai-toolkit179—~1kAutomated safety check: PassApache-2.0
Install Anti-Slop Oxlint Rulesdmmulroy/anti-slop5.2k—~2.2kAutomated safety check: PassMIT
Add Opik Code Quality Hookcomet-ml/opik22k—~2.3kAutomated safety check: PassApache-2.0
LobeHub Alint Rule Set Maintenancelobehub/lobehub83k—~1.9kAutomated safety check: PassCustom licence
Code Quality Gatefengshao1227/ccg-workflow5.9k—~593Automated safety check: NotesMIT
Experiment Iterative CoderEvoScientist/EvoSkills4743 repos~2.5kAutomated safety check: PassApache-2.0

Similar skills

  • Installs, updates or migrates the vendored anti-slop Oxlint plugin in a repository, keeping local rule changes and the plugin's license and provenance files.

    5.2k GitHub stars~2.2k tokensUpdated 27 days ago
    DevelopmentAuto-check passed
  • Checklist for wiring a new linter into Opik's Code Quality pipeline: the four files to edit, the silent-failure gotchas and the pass/fail verification loop.

    22k GitHub stars~2.3k tokensUpdated today
    DevelopmentAuto-check passed
  • Maintains LobeHub's model-backed alint rule set: writing rules, removing false positives against real code, deciding warn versus error and tracking token cost.

    83k GitHub stars~1.9k tokensUpdated today
    DevelopmentAuto-check passed
  • Code Quality Gate

    fengshao1227/ccg-workflow

    Scans code for complexity, long functions, duplicated blocks, naming problems and code smells with a Node script, then reports and suggests refactors.

    5.9k GitHub stars~593 tokensUpdated 22 days ago
    DevelopmentAuto-check: notes
  • Experiment Iterative Coder

    EvoScientist/EvoSkills

    Iterative code refinement through plan → code → evaluate → refine cycles.

    474 GitHub starsUsed in 3 repos~2.5k tokens
    DevelopmentAuto-check passed
  • Code Quality

    redis/RedisInsight

    Official

    Code-quality standards for RedisInsight: TypeScript strictness, naming conventions (camelCase, PascalCase, UPPERSNAKECASE), linting rules, no any without reason, no !important in styles, and…

    8.9k GitHub stars~1.2k tokensUpdated 3 days ago
    DevelopmentAuto-check passed

More from softspark/ai-toolkit

All 112 skills in this repo
  • Prepare Test Env

    softspark/ai-toolkit

    Prepare or verify a project QA environment with source identity, readiness, browser access, evidence paths and owned cleanup.

    179 GitHub stars~1.8k tokensUpdated today
    Auto-check: notes
  • A11y Validate

    softspark/ai-toolkit

    Accessibility validator: WCAG 2.1 AA, EN 301 549, EAA. An agent skill from softspark/ai-toolkit.

    179 GitHub stars~3.8k tokensUpdated today
    Auto-check: notes
  • Autonomous Dev

    softspark/ai-toolkit

    Drives a brief, specification, issue or existing PR through implementation, review, tests and QA to a ready PR.

    179 GitHub stars~2.6k tokensUpdated today
    Auto-check: notes
  • Brand Voice

    softspark/ai-toolkit

    Direct technical voice for docs, README, user-facing text. An agent skill from softspark/ai-toolkit.

    179 GitHub stars~2.1k tokensUpdated today
    Auto-check passed
  • CI

    softspark/ai-toolkit

    Detect/generate/debug CI pipeline config (GitHub Actions, GitLab CI).

    179 GitHub stars~1.1k tokensUpdated today
    Auto-check: notes
  • Commit

    softspark/ai-toolkit

    Creates Conventional Commits with pre-commit validation. An agent skill from softspark/ai-toolkit.

    179 GitHub stars~585 tokensUpdated today
    Auto-check: notes

Categories

Questions about Analyze

What does Analyze do?

Analyzes code quality, complexity, patterns across codebase. Analyze is an agent skill from softspark/ai-toolkit. Analyzes code quality, complexity, patterns across codebase.

When should I use Analyze?

Analyze fits situations like: tasks that involve Code quality; tasks that involve Linting and formatting.

How do I install Analyze in Claude Code?

Run `npx skills add softspark/ai-toolkit --skill analyze -a claude-code`. Or copy the skill folder (app/skills/analyze in softspark/ai-toolkit) into .claude/skills/analyze in your project. Claude Code loads it when a task matches its description.

How do I install Analyze in Codex?

Run `npx skills add softspark/ai-toolkit --skill analyze -a codex`. Or copy the skill folder (app/skills/analyze in softspark/ai-toolkit) into .agents/skills/analyze in your project. Codex loads it when a task matches its description.

Can I use Analyze in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add softspark/ai-toolkit --skill analyze -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/analyze, .gemini/skills/analyze, .github/skills/analyze and .opencode/skills/analyze in your project.

What does Analyze need to run?

Going by SKILL.md and its folder, Analyze needs Python for the scripts in its folder and the command-line tools its instructions call (python3 and mypy). Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Grep, Glob.

Does Analyze access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Analyze safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Analyze use?

Analyze is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Analyze use?

About 1k tokens (SKILL.md is roughly 4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Analyze?

Skills that share tags, products or a category with Analyze: Install Anti-Slop Oxlint Rules (dmmulroy/anti-slop, 5.2k stars), Add Opik Code Quality Hook (comet-ml/opik, 22k stars), LobeHub Alint Rule Set Maintenance (lobehub/lobehub, 83k stars) and Code Quality Gate (fengshao1227/ccg-workflow, 5.9k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Analyze?

softspark (a GitHub user) maintains it in softspark/ai-toolkit, which has 179 GitHub stars. The repository holds 112 skills in this directory. The repository was last updated on October 7, 2026.

Source: softspark/ai-toolkit on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.