cwinvestments/scan
skills/scan/SKILL.md
Use when the user says 'scan project', 'estimate', 'how much to charge', or needs codebase complexity analysis.
$ install --global
skillsauthnpx skillsauth add cwinvestments/memstack scanInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 3:34 PM199.7s1 file scanned
SKILL.md
- name:
- scan
- description:
- Use when the user says 'scan project', 'estimate', 'how much to charge', or needs codebase complexity analysis.
- version:
- 1.0.0
🔍 Scan — Analyzing Project Scope...
Analyze a project's complexity and generate pricing recommendations.
Activation
When this skill activates, output:
🔍 Scan — Analyzing project scope...
Then execute the protocol below.
Context Guard
| Context | Status | |---------|--------| | User asks to scan or analyze a project | ACTIVE — full scan | | User asks about pricing or estimates | ACTIVE — full scan + pricing | | User mentions project metrics (LOC, file count) | ACTIVE — quick metrics | | Discussing project analysis concepts generally | DORMANT — do not activate | | User is building/coding, not analyzing | DORMANT — do not activate |
Protocol
-
Scan the codebase:
find . -type f \( -name "*.ts" -o -name "*.tsx" -o -name "*.js" -o -name "*.py" -o -name "*.css" \) | wc -l find . -type f \( -name "*.ts" -o -name "*.tsx" -o -name "*.js" \) -exec cat {} + | wc -l -
Count key components: pages/routes, API endpoints, database tables, external integrations, auth complexity
-
Assess complexity tier:
- Simple (< 20 files, < 3K LOC): $500–$2,000
- Medium (20-60 files, 3K-15K LOC): $2,000–$8,000
- Complex (60-150 files, 15K-50K LOC): $8,000–$25,000
- Enterprise (150+ files, 50K+ LOC): $25,000+
-
Factor in: Auth (+2FA/SSO), payments (+$1-3K), real-time (+$1-2K), admin panel (+$2-5K), mobile responsive (+20-30%), per API integration (+$500-1.5K)
-
Generate three-tier pricing: Budget, Standard, Premium
Inputs
- Project directory path
- New build vs maintenance estimate
Outputs
- Project analysis: file counts, LOC, endpoints, tables
- Complexity tier assessment
- Three-tier pricing recommendation
Example Usage
User: "scan AdminStack and estimate pricing"
🔍 Scan — Analyzing project scope...
Files: 127 | LOC: ~28,000 | Pages: 27 | API Routes: 34 | Tables: 20
Integrations: Supabase, Stripe, Square, SendGrid, Railway, Hetzner
Complexity: Complex tier
Budget: $15,000 — Core features, basic styling
Standard: $22,000 — Full features, admin panel, responsive
Premium: $30,000 — Full + custom integrations + 3mo support
Level History
- Lv.1 — Base: File/LOC counting with complexity assessment. (Origin: MemStack v1.0, Feb 2026)
- Lv.2 — Enhanced: Added YAML frontmatter, context guard, activation message, integration pricing. (Origin: MemStack v2.0 MemoryCore merge, Feb 2026)
Related Skills
cwinvestments/diary
tools
VerifiedTrustedCommunity
Use when the user says 'save diary', 'log session', 'wrapping up', or at end of a productive session.
358SKILL.mdUpdated Apr 4, 2026
cwinvestments/memstack-marketing-marketplace-submit
tools
VerifiedTrustedCommunity
Use when the user says 'submit to marketplace', 'publish my skill', 'share this skill', 'list on marketplace', 'submit plugin', 'publish to community', or needs to submit a skill or plugin to a community marketplace via PR. Do NOT use for building skills or writing plugin code.
283SKILL.mdUpdated Apr 20, 2026
cwinvestments/memstack-development-webapp-testing
development
VerifiedTrustedCommunity
Use when the user says 'write browser tests', 'test this page', 'playwright test', 'e2e test', 'end to end test', 'browser test', 'test the UI', or needs Playwright-based browser testing for a web application. Do NOT use for unit tests, API tests, or non-browser testing.
283SKILL.mdUpdated Apr 20, 2026
cwinvestments/memstack-development-mentor
development
VerifiedTrustedCommunity
Use when the user says 'teach me', 'explain as you go', 'mentor mode', 'walk me through', 'help me learn', 'explain why', 'learning mode', or wants real-time plain language narration of decisions and tradeoffs while building. Do NOT use for code review or debugging.
283SKILL.mdUpdated Apr 20, 2026