Can this skill identify security vulnerabilities?

Yes, it is specifically designed to perform security audits, scanning for injection risks, XSS, insecure token storage, and sensitive data exposure.

Is it suitable for small projects?

While it works on any size, it is most effective for large codebases. For small, focused snippets, the standard Read tool is usually faster and more efficient.

How does this differ from standard code reading tools?

While standard tools process files individually or in small chunks, this skill leverages Gemini's 1M token context to reason over the entire repository at once, spotting cross-file patterns.

What are the prerequisites for using this skill?

You must have @anthropic/gemini-cli installed globally via npm and configured with valid API credentials for the Gemini model.

Gemini Code Analyzer

Name: Gemini Code Analyzer
Author: joel611

byjoel611

•

Security & Testing

Leverages Gemini's 1 million token context window to perform deep architectural analysis, pattern detection, and security audits across massive codebases.

About

The Gemini Code Analyzer skill empowers developers to understand complex systems by spawning a specialized subagent that utilizes the extensive context window of Gemini models. By wrapping gemini-cli, it can ingest and reason over entire repositories simultaneously, enabling precise identification of legacy patterns, security vulnerabilities, and intricate data flows that span multiple directories. Whether you're onboarding to a new project or conducting a comprehensive code quality review, this skill provides the high-level oversight and granular detail needed to master large-scale codebases without manually reading every file.

Key Features

Cross-file feature tracing and complex dependency analysis
Deep pattern detection across 1M+ token context windows
1 GitHub stars
Comprehensive architectural mapping and component hierarchy visualization
Automated generation of onboarding and technical documentation from source
Automated security vulnerability scanning for common risks like XSS and Injection

Use Cases

Generating architectural documentation and data flow diagrams for a complex microservices repo
Auditing a massive legacy codebase for security flaws and technical debt during a migration
Identifying inconsistent usage of design patterns or hooks across hundreds of frontend files

About

Key Features

Cross-file feature tracing and complex dependency analysis
Deep pattern detection across 1M+ token context windows
1 GitHub stars
Comprehensive architectural mapping and component hierarchy visualization
Automated generation of onboarding and technical documentation from source
Automated security vulnerability scanning for common risks like XSS and Injection

Use Cases

Generating architectural documentation and data flow diagrams for a complex microservices repo
Auditing a massive legacy codebase for security flaws and technical debt during a migration
Identifying inconsistent usage of design patterns or hooks across hundreds of frontend files