Best fit
- 跨栈源代码资产审计——对每个文件进行分类，检测嵌入的第三方库，并为每个模块提供可操作的四级判定结果，附带交互式HTML报告。
affaan-m/ECC
repo-scan
跨栈源代码资产审计——对每个文件进行分类，检测嵌入的第三方库，并为每个模块提供可操作的四级判定结果，附带交互式HTML报告。
64CollectingRuns scriptsNetwork access
See how to use itView GitHub source
npx skills add https://github.com/affaan-m/ECC --skill "docs/zh-CN/skills/repo-scan"Automated source guide
Source checked Jul 28, 2026·Refresh due Oct 26, 2026
Reorganized from the pinned upstream SKILL.md
Turn repo-scan's source instructions into a guide you can follow
According to the pinned SKILL.md from affaan-m/ECC: 每个生态系统都有自己的依赖管理器，但没有工具能跨 C++、Android、iOS 和 Web 告诉你：有多少代码真正属于你，哪些是第三方代码，哪些是冗余负担。
npx skills add https://github.com/affaan-m/ECC --skill "docs/zh-CN/skills/repo-scan"Bring this context
- A concrete task that matches the documented purpose of repo-scan.
- The files, examples, or context the task depends on.
- Your constraints, target environment, and definition of done.
Expected outputs
- A result that follows the pinned repo-scan instructions.
- A concise record of assumptions, inputs used, and unresolved questions.
- A final check against the source workflow and relevant permission signals.
Key source sections
Read repo-scan through these 5 source sections
Sections are extracted automatically from the pinned SKILL.md and link back to the source.
适用场景
接手大型遗留代码库，需要了解整体结构 重大重构前——识别核心代码、重复代码和废弃代码 审计直接嵌入源码（而非通过包管理器声明）的第三方依赖 为单体仓库重组准备架构决策记录
接手大型遗留代码库，需要了解整体结构重大重构前——识别核心代码、重复代码和废弃代码审计直接嵌入源码（而非通过包管理器声明）的第三方依赖
安装
Review the “安装” section in the pinned source before continuing.
Review and apply the “安装” source section.
Fetch only the pinned commit for reproducibility
mkdir -p /.claude/skills/repo-scan git init repo-scan cd repo-scan git remote add origin https://github.com/haibindev/repo-scan.git git fetch --depth 1 origin 2742664 git checkout --detach FETCHHEAD cp -r . /.claude/skills/repo-scan
分类仓库表面：枚举文件，将每个文件标记为项目代码、嵌入的第三方代码或构建产物。检测嵌入的库：检查目录名、头文件、许可证文件和版本标记，识别捆绑的依赖及其可能版本。为每个模块评分：按模块或子系统分组文件，根据所有权、重复度和维护成本分配四种判定之一。
核心能力
Review the “核心能力” section in the pinned source before continuing.
Review and apply the “核心能力” source section.
分析深度级别
Review the “分析深度级别” section in the pinned source before continuing.
Review and apply the “分析深度级别” source section.
SkillSignal prompt templates
Provide the task, context, and acceptance criteria
These prompts were written by SkillSignal from the source structure; they are not upstream text.
Task-start prompt
Confirm source fit, inputs, and outputs before acting.
Use repo-scan to help me with: [specific task]. Context: [files, data, or background]. Constraints: [environment, scope, and prohibited actions]. Before acting, check the pinned SKILL.md and explain which sections apply, what inputs are still missing, and what you will deliver.
Source-guided execution
Make the Agent explicitly follow the key extracted sections.
Apply the pinned repo-scan source to [task]. Pay particular attention to these source sections: “适用场景”, “安装”, “Fetch only the pinned commit for reproducibility”, “核心能力”, “分析深度级别”. Preserve the important decision at each step. Mark facts not covered by the source as “needs confirmation” instead of inventing them. Then verify the result against my acceptance criteria: [criteria].
Result-review prompt
Check omissions, permissions, and source drift before delivery.
Review the current repo-scan result: (1) does it satisfy the original task; (2) were any applicable steps or limits in the pinned SKILL.md missed; (3) did it perform any unauthorized file, command, network, or data action; and (4) which conclusions remain unverified? List issues first, then fix only what the source or user authorization supports.
Output checklist
Verify each item before delivery
The task matches the purpose documented in the SKILL.md.
The source section “适用场景” has been checked.
The source section “安装” has been checked.
The source section “Fetch only the pinned commit for reproducibility” has been checked.
The source section “核心能力” has been checked.
Inputs, constraints, and acceptance criteria are explicit.
Unverified facts, compatibility, and outcome claims are clearly marked.
Any file, command, network, or data action has been reviewed.
Choose a different workflow
When another Skill is the better fit
repo-scan
Cross-stack source code asset audit — classifies every file, detects embedded third-party libraries, and delivers actionable four-level verdicts per module with interactive HTML reports.
A separate implementation from affaan-m/ECC; compare its source, maintenance signals, and permission requirements.
Open source detailrepo-scan
クロススタックのソースコード資産監査——各ファイルを分類し、埋め込まれたサードパーティライブラリを検出し、各モジュールに対してインタラクティブなHTMLレポートとともに実用的な4段階の判定を提供する。
A separate implementation from affaan-m/ECC; compare its source, maintenance signals, and permission requirements.
Open source detailab-testing
When the user wants to plan, design, or implement an A/B test or experiment, or build a growth experimentation program. Also use when the user mentions "A/B test," "split test," "experiment," "test this change," "variant copy," "multivariate test," "hypothesis," "should I test this," "which version is better," "test two versions," "statistical significance," "how long should I run this test," "growth experiments," "experiment velocity," "experiment backlog," "ICE score," "experimentation program
A separate implementation from coreyhaines31/marketingskills; compare its source, maintenance signals, and permission requirements.
Open source detailFAQ
What does repo-scan do?
每个生态系统都有自己的依赖管理器，但没有工具能跨 C++、Android、iOS 和 Web 告诉你：有多少代码真正属于你，哪些是第三方代码，哪些是冗余负担。
How do I start using repo-scan?
The catalog detected this source-specific install command: npx skills add https://github.com/affaan-m/ECC --skill "docs/zh-CN/skills/repo-scan". Inspect the command and pinned source before running it.
Which Agent platforms does it declare?
No dedicated Agent platform is declared in the pinned source record.
Repository stars
234,327
Repository forks
35,711
Quality
64/100
Source repository last pushed
Quality breakdown
Based on traceable docs and repository signals; stars are not treated as quality.
Documentation18/30
Specificity14/25
Maintenance20/20
Trust signals12/25
Compare before choosing
Related Agent Skills and source variants
These links are selected from shared tasks, functions, stacks, platforms, and same-name variants. Compare the source owner, documentation, permissions, and maintenance signals.
repo-scan by affaan-m
Cross-stack source code asset audit — classifies every file, detects embedded third-party libraries, and delivers actionable four-level verdicts per module with interactive HTML reports.
repo-scan by affaan-m
クロススタックのソースコード資産監査——各ファイルを分類し、埋め込まれたサードパーティライブラリを検出し、各モジュールに対してインタラクティブなHTMLレポートとともに実用的な4段階の判定を提供する。
ab-testing by coreyhaines31
When the user wants to plan, design, or implement an A/B test or experiment, or build a growth experimentation program. Also use when the user mentions "A/B test," "split test," "experiment," "test this change," "variant copy," "multivariate test," "hypothesis," "should I test this," "which version is better," "test two versions," "statistical significance," "how long should I run this test," "growth experiments," "experiment velocity," "experiment backlog," "ICE score," "experimentation program
churn-prevention by coreyhaines31
When the user wants to reduce churn, build cancellation flows, set up save offers, recover failed payments, or implement retention strategies. Also use when the user mentions 'churn,' 'cancel flow,' 'offboarding,' 'save offer,' 'dunning,' 'failed payment recovery,' 'win-back,' 'retention,' 'exit survey,' 'pause subscription,' 'involuntary churn,' 'people keep canceling,' 'churn rate is too high,' 'how do I keep users,' or 'customers are leaving.' Use this whenever someone is losing subscribers o
design-intelligence by event4u-app
Grounded design brief from the adopted corpus — style, WCAG-checked color tokens, typography, layout pattern, anti-patterns. Use on ui-design-brief or any which-style/palette/font/chart decision.
View original Skill.mdThis page is parsed directly from the repository SKILL.md without editorial rewriting. Collected: Jul 28, 2026 · about 1 min
repo-scan
每个生态系统都有自己的依赖管理器，但没有工具能跨 C++、Android、iOS 和 Web 告诉你：有多少代码真正属于你，哪些是第三方代码，哪些是冗余负担。
适用场景
- 接手大型遗留代码库，需要了解整体结构
- 重大重构前——识别核心代码、重复代码和废弃代码
- 审计直接嵌入源码（而非通过包管理器声明）的第三方依赖
- 为单体仓库重组准备架构决策记录
安装
# Fetch only the pinned commit for reproducibility
mkdir -p ~/.claude/skills/repo-scan
git init repo-scan
cd repo-scan
git remote add origin https://github.com/haibindev/repo-scan.git
git fetch --depth 1 origin 2742664
git checkout --detach FETCH_HEAD
cp -r . ~/.claude/skills/repo-scan
安装任何代理技能前，请先审查源码。
核心能力
| 能力 | 描述 |
|---|---|
| 跨技术栈扫描 | 一次扫描 C/C++、Java/Android、iOS（OC/Swift）、Web（TS/JS/Vue） |
| 文件分类 | 每个文件标记为项目代码、第三方代码或构建产物 |
| 库检测 | 识别 50+ 已知库（FFmpeg、Boost、OpenSSL…）并提取版本号 |
| 四级判定 | 核心资产 / 提取合并 / 重建 / 废弃 |
| HTML 报告 | 交互式深色主题页面，支持逐层下钻导航 |
| 单体仓库支持 | 分层扫描，提供摘要 + 子项目报告 |
分析深度级别
| 级别 | 读取文件数 | 适用场景 |
|---|---|---|
fast | 每模块 1-2 个 | 快速盘点大型目录 |
standard | 每模块 2-5 个 | 默认审计，含完整依赖 + 架构检查 |
deep | 每模块 5-10 个 | 增加线程安全、内存管理、API 一致性检查 |
full | 所有文件 | 合并前全面审查 |
工作原理
- 分类仓库表面：枚举文件，将每个文件标记为项目代码、嵌入的第三方代码或构建产物。
- 检测嵌入的库：检查目录名、头文件、许可证文件和版本标记，识别捆绑的依赖及其可能版本。
- 为每个模块评分：按模块或子系统分组文件，根据所有权、重复度和维护成本分配四种判定之一。
- 突出结构风险：指出冗余产物、重复的封装器、过时的供应商代码，以及应提取、重建或废弃的模块。
- 生成报告：返回简洁摘要及交互式 HTML 输出，支持按模块下钻，便于异步审查审计结果。
示例
在一个 50,000 文件的 C++ 单体仓库中：
- 发现仍在使用 FFmpeg 2.x（2015 年版本）
- 发现同一 SDK 封装器重复了 3 次
- 识别出 636 MB 已提交的 Debug/ipch/obj 构建产物
- 分类结果：3 MB 项目代码 vs 596 MB 第三方代码
最佳实践
- 首次审计时从
standard深度开始 - 对包含 100+ 模块的单体仓库使用
fast快速盘点 - 对标记为需重构的模块增量运行
deep - 审查跨模块分析结果，检测子项目间的重复代码
链接
- Source repo
- affaan-m/ECC
- Skill path
- docs/zh-CN/skills/repo-scan/SKILL.md
- Commit SHA
- 4e973d3eaf92
- Repository license
- MIT
- Data collected