Does this skill check for security vulnerabilities?

Yes, the 'security' analysis type specifically looks for vulnerabilities, unsafe code patterns, and potential dependency issues.

Can I focus the analysis on a specific folder?

Yes, the skill accepts an optional context argument allowing you to specify specific directories or files for targeted analysis.

Where are the analysis reports saved?

Reports are saved as Markdown files in the directory specified in your configuration file, defaulting to an 'analysis' folder in your project root.

What types of analysis can I perform?

You can perform five specific types of analysis: bug (logic errors), debt (technical debt), doc (documentation), security (vulnerabilities), and style (linting/best practices).

How does the skill handle false positives?

The tool is governed by core principles to only report real, unfixed issues by understanding project-specific patterns and framework conventions before flagging.

SDLC Code Analyzer

Name: SDLC Code Analyzer
Author: e-stpierre

bye-stpierre

0•

Security & Testing

Performs multi-domain codebase audits to identify bugs, technical debt, security vulnerabilities, and documentation gaps.

The Analyze skill is a comprehensive diagnostic tool for Claude Code designed to maintain high code quality standards across the software development lifecycle. It systematically scans project files for logic errors, architectural debt, security flaws, and style inconsistencies, providing structured feedback with severity ratings and actionable fix suggestions. By integrating type-specific logic for different domains, it allows developers to maintain a healthy codebase through automated yet context-aware reviews that generate both machine-readable JSON and human-friendly Markdown reports.

Key Features

01Context-aware evaluation that respects linter configs and project-specific patterns

020 GitHub stars

03Severity-based categorization for prioritized remediation of critical issues

04Targeted analysis scope for specific files or directories to improve speed

05Multi-domain analysis covering bugs, debt, security, style, and documentation

06Automated Markdown report generation with configurable storage directories

Use Cases

01Evaluating inherited codebases to identify and prioritize technical debt

02Automating documentation reviews to ensure READMEs and guides stay in sync with code

03Pre-release security and bug auditing to ensure production readiness

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add e-stpierre/clauding analyze

For use in Claude.ai and ChatGPT

Download Skill