# Analyze Your Codebase with a Structured Review

Large repositories hide architecture, dependency, and quality risks. This skill produces a structured map, focused checks, and prioritized recommendations.

## Install

```bash
npx skillstore add ai-vibe-prompts/atman36-codebase-analysis
```

## Metadata

- Status: approved
- Slug: atman36-codebase-analysis
- Version: 1.0.0
- Author version: 1.0.0
- Skillstore revision: r2
- Version status: valid
- Tree hash: cfd9b21719db07f06498fafd3131a4458affda55ac9d11c6836f13b8e21fa11c
- Author: AI-Vibe-Prompts
- GitHub username: Atman36
- License: MIT
- Repository: https://github.com/Atman36/AI-Vibe-Prompts/tree/main/.claude/skills/core/codebase-analysis
- Ref: 89edfdc710d0846129dcee6a929477b04f08052c
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands
- Quality score: 80
- Quality tier: silver
- Public page: https://skillstore.pages.dev/skills/atman36-codebase-analysis
- Manifest: https://skillstore.pages.dev/api/skills/atman36-codebase-analysis/manifest

## Capabilities

- Maps important directories, configuration files, manifests, tests, and build outputs.
- Identifies JavaScript frameworks, runtime dependencies, development tools, and package requirements.
- Examines component, API, state-management, monorepo, feature, and layered organization patterns.
- Checks linting, test coverage setup, TypeScript strictness, and common complexity indicators.
- Produces a structured report with risk areas, prioritized recommendations, and next steps.

## Use Cases

- Orient a New Developer: Create a concise map of directories, frameworks, dependencies, tests, and conventions before the developer begins work.
- Plan an Architecture Change: Identify current organization patterns, module relationships, and risk areas before a major refactor.
- Prioritize Maintenance Work: Review quality signals, dependency health, test setup, and technical debt to guide the next maintenance cycle.

## Prompt Templates

### Quick Repository Overview

```
Analyze this repository and summarize its project type, main directories, framework, and key dependencies.
```

### Quality and Testing Review

```
Review this codebase for testing, TypeScript strictness, linting, and visible technical debt. Prioritize three recommendations.
```

### Architecture Pattern Review

```
Compare frontend, API, and state-management organization across major modules. Identify inconsistent patterns and explain their maintenance impact.
```

### Targeted Refactor Assessment

```
Perform a pre-refactor analysis of [directory]. Trace dependencies, identify risk areas, and propose verification steps without changing files.
```

## Limitations

- The methodology focuses mainly on JavaScript and TypeScript repositories.
- Coverage and dependency results depend on available package scripts and local tools.
- Large repositories may require targeted analysis by directory or feature.
- The skill reports findings but does not implement recommended changes.

## Best Practices

- Begin with manifests and top-level directories before reading implementation details.
- Analyze large repositories in focused sections and record evidence for each conclusion.
- Review package scripts before running lint, coverage, audit, or dependency commands.

## Anti Patterns

- Do not infer architecture from filenames without checking representative implementation files.
- Do not run repository-defined scripts before reviewing their commands and obtaining approval.
- Do not present generated metrics as measured results when required tools were unavailable.

## Security Audit

- Audited at: 2026-07-23T07:22:22.461\+00:00
- Summary: Forty-eight static alerts are Markdown formatting or harmless file and tool references, so they are false positives. Two medium findings are confirmed because the skill directs an auto-invoked agent to execute repository-defined npm scripts. No prompt injection or data-exfiltration intent was found.

## Stats

- Views: 279
- Downloads: 9
- Favorites: 0
- Popularity score: 0