# Analyze Codebases for Business Logic

Existing systems often hide requirements inside code, tests, and configuration. This skill guides structured analysis that turns code observations into clear business documentation.

## Install

```bash
npx skillstore add doubleslashse/codebase-analysis
```

## Metadata

- Status: approved
- Slug: doubleslashse-codebase-analysis
- Skillstore revision: r1
- Version status: missing
- Tree hash: 3cee49a82640999314552f6847349a7a788cae83732d6cc6066439e204ad8d3f
- Author: DoubleslashSE
- GitHub username: DoubleslashSE
- License: MIT
- Repository: https://github.com/DoubleslashSE/claude-workflows/tree/main/Plugins/business-analyst/skills/codebase-analysis
- Ref: 72d5025b022c77f7a51bdf5c1637c689c80e89d1
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network
- Quality score: 79
- Quality tier: bronze
- Public page: https://skillstore.pages.dev/skills/doubleslashse-codebase-analysis
- Manifest: https://skillstore.pages.dev/api/skills/doubleslashse-codebase-analysis/manifest

## Capabilities

- Guides mapping of project structure, layers, entry points, and deployment setup.
- Provides heuristics for finding entities, validation rules, services, endpoints, and integrations.
- Supplies documentation formats for domain models, business rules, and integration summaries.
- Identifies architectural cues for layered, clean, microservice, event-driven, and CQRS systems.
- Helps convert code observations into questions about workflows, permissions, constraints, and data.

## Use Cases

- Document a Legacy Product: Extract entities, rules, workflows, and integrations from a mature application before planning changes.
- Prepare Modernization Discovery: Map architecture patterns, bounded contexts, and external dependencies before a rewrite or migration.
- Onboard to an Unfamiliar Repository: Build a practical understanding of capabilities, permissions, data models, and edge cases.

## Prompt Templates

### Begin Repository Overview

```
Analyze this repository using the codebase-analysis skill. Summarize the main components, domain areas, user capabilities, and likely entry points.
```

### Extract Business Rules

```
Find business rules in services, validation logic, tests, and domain models. Document each rule with evidence and any assumptions.
```

### Map Integrations and Data Flow

```
Map external integrations, API endpoints, message flows, authentication patterns, error handling, and data exchanged by this system.
```

### Create Brownfield Discovery Brief

```
Produce a brownfield discovery brief with domain model, workflows, permissions, integrations, constraints, unknowns, and recommended validation questions.
```

## Limitations

- It does not run tools or parse code automatically; it is an analysis guide.
- It does not validate inferred requirements with stakeholders.
- It may miss behavior hidden in runtime configuration, external services, or generated code.
- It requires repository access and enough domain context to interpret findings.

## Best Practices

- Start from entry points, then trace to services, domain models, persistence, and integrations.
- Record file references for every requirement or business rule you infer.
- Separate observed behavior from assumptions that need stakeholder confirmation.

## Anti Patterns

- Treating class names as requirements without checking behavior and tests.
- Ignoring migrations, configuration, and test data when mapping workflows.
- Documenting integrations without noting authentication, error handling, and data flow.

## Security Audit

- Audited at: 2026-07-06T11:18:17.474\+00:00
- Summary: I found no executable code, install hooks, prompt-injection text, credential access, or data exfiltration intent in the two scanned Markdown files. All static findings are false positives caused by code fences, inline code terms, local grep examples, a sample payment URL, and domain-model examples. The bash snippets are fixed local search examples, and the skill declares Read, Grep, Glob, and LSP as allowed tools.

## Stats

- Views: 194
- Downloads: 11
- Favorites: 1
- Popularity score: 0