Skills analyze-project
๐Ÿ“ฆ

analyze-project

Content revision r2 Safe โšก Contains scriptsโš™๏ธ External commands๐Ÿ“ Filesystem access

Analyze Deep Learning Repositories

Research repositories can hide important model, configuration, and evaluation relationships. This skill maps those relationships and reports suspicious patterns without changing project code.

Supports: Claude Codex Code(CC)
๐Ÿฅˆ 81 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "analyze-project" from https://skillstore.io/skills/lllllllama-analyze-project.md and its manifest at https://skillstore.io/api/skills/lllllllama-analyze-project/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "analyze-project". Map the training and evaluation flow in this image classification repository.

Expected outcome:

  • Training candidates: train.py and configs/classification.yaml.
  • Evaluation candidates: evaluate.py and metrics/topk.py.
  • Review the configuration binding before changing model construction.

Using "analyze-project". Find likely insertion points for a new encoder adapter.

Expected outcome:

  • Inspect the encoder constructor and forward method first.
  • Treat evaluation metric files as protected zones.
  • Verify checkpoint compatibility before selecting an insertion point.

Using "analyze-project". Audit suspicious implementation patterns without running the project.

Expected outcome:

  • Repeated sigmoid usage was detected and needs manual review.
  • No obvious positional encoding signal was found near attention-related files.
  • These observations are heuristics, not confirmed defects.

Security Audit

Safe
v7 โ€ข 8/8/2026 Open versioned report

Twenty-five static findings are false positives caused by string matching, Markdown backticks, and ordinary Python syntax. Two findings are confirmed because SKILL.md directs agents to read files outside the packaged skill directory.

4
Files scanned
726
Lines analyzed
2
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
Path traversal sequence
`../../references/agent-operating-principles.md`; this skill should guide
The skill explicitly directs the agent to read ../../references/agent-operating-principles.md, which escapes the packaged skill directory and trusts content outside the audited bundle.
High
Path traversal sequence
Use `references/analysis-policy.md` and the shared `../../references/research-pitfall-checklist.md`.
The skill explicitly directs the agent to read ../../references/research-pitfall-checklist.md, crossing the package boundary to unaudited external instructions.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/lllllllama-analyze-project/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/lllllllama-analyze-project/security.svg)](https://skillstore.io/skills/lllllllama-analyze-project?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/lllllllama-analyze-project?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/lllllllama-analyze-project/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/lllllllama-analyze-project.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

lllllllama. (2026). analyze-project security audit report (audit version 7) [Author version unspecified]. Skillstore. https://skillstore.io/skills/lllllllama-analyze-project/audits/7

BibTeX citation

@techreport{lllllllama-lllllllama-analyze-project-2026, author = {lllllllama}, title = {analyze-project security audit report (audit version 7)}, institution = {Skillstore}, year = {2026}, number = {7}, url = {https://skillstore.io/skills/lllllllama-analyze-project/audits/7}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "analyze-project security audit report (audit version 7)" version: "unspecified" type: report authors: - name: "lllllllama" date-released: "2026-08-08" url: "https://skillstore.io/skills/lllllllama-analyze-project/audits/7" identifiers: - type: other value: "skillstore:lllllllama-analyze-project:audit:7" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
64
Architecture
85
Maintainability
87
Content
67
Community
91
Spec Compliance

What You Can Build

Map an unfamiliar research repository

Identify important entrypoints, model files, configurations, datasets, and outputs before planning changes.

Review a paper implementation

Create a conservative map of architecture, evaluation logic, and suspicious patterns before reproducing results.

Prepare a scoped code review

Locate likely change zones and protected evaluation areas before assigning implementation work.

Try These Prompts

Basic repository map
Analyze this repository and identify its main model, training, inference, evaluation, and configuration files.
Trace model execution
Map model construction and forward execution from configuration loading through training and inference entrypoints.
Review evaluation boundaries
Identify evaluation commands, metrics, expected artifacts, protected files, and likely risks without running jobs.
Plan a constrained extension
Find safe insertion points for [component], list affected interfaces, and separate evidence from heuristic concerns.

Best Practices

  • Provide the repository root and a clear task family.
  • Supply evaluation context when metric, dataset, or benchmark details matter.
  • Verify every heuristic against the relevant source before planning changes.

Avoid

  • Do not treat heuristic warnings as confirmed bugs.
  • Do not use this skill to run heavy training or evaluation jobs.
  • Do not request automatic patches or broad speculative refactoring.

Frequently Asked Questions

Does this skill modify repository code?
No. It reads project files and writes separate analysis outputs.
Does it run training or evaluation commands?
No. It performs lightweight static inspection only.
Which repositories work best?
Deep learning repositories with Python code and recognizable model, training, evaluation, or configuration paths work best.
Can it confirm implementation bugs?
No. Suspicious patterns are heuristic signals that require source review and runtime evidence.
What context can I provide?
You can provide task family, dataset, benchmark, evaluation path, command, metric, artifacts, and research focus.
What files does it produce?
It produces summary, risk, research map, change map, evaluation contract, and status files.

Developer Details

Author

lllllllama

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

656be3040aef5c047555a908cd5c695d22a4a548

Maintenance freshness

8/8/2026

Usage

22 downloads ยท 0 views

File structure

๐Ÿ“ agents/

๐Ÿ“„ openai.yaml

๐Ÿ“ references/

๐Ÿ“„ analysis-policy.md

๐Ÿ“ scripts/

๐Ÿ“„ analyze_project.py

๐Ÿ“„ SKILL.md