skills/council/scout/library-evaluation/SKILL.md
Use when adding new packages, choosing between dependency alternatives, or auditing existing libraries. Covers popularity metrics, maintenance health, bundle impact, API quality, and license compatibility with weighted scoring. Do not use for evaluating frameworks or platforms (use technology-radar) or comparing competing products (use competitive-analysis).
npx skillsauth add dtsong/my-claude-setup library-evaluationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Produce a structured, weighted comparison of candidate libraries to make dependency decisions based on evidence rather than familiarity or hype.
No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.
For each candidate:
For each candidate:
For each candidate:
For each candidate:
For each candidate:
Compaction resilience: If context was compacted, re-read this SKILL.md and check the Progress Checklist for completed steps before continuing.
| Criterion | Weight | Candidate A | Candidate B | Candidate C | |-----------|--------|-------------|-------------|-------------| | Weekly downloads | ... | .../5 | .../5 | .../5 | | Maintenance health | ... | .../5 | .../5 | .../5 | | Bundle size | ... | .../5 | .../5 | .../5 | | TypeScript support | ... | .../5 | .../5 | .../5 | | API quality | ... | .../5 | .../5 | .../5 | | License | ... | .../5 | .../5 | .../5 | | Weighted Total | | ... | ... | ... |
Recommended: [Library Name] Rationale: [2-3 sentence justification referencing the top differentiating factors] Risks: [Known risks or caveats with the recommendation] Migration notes: [If replacing an existing dependency, key migration steps]
development
Use when the council needs to surface organizational knowledge buried across multiple internal sources (wikis, design docs, ADRs, past tickets, postmortems, chat archives, code repos). Plans where to look, what to cross-reference, and how to synthesize findings into evidence the council can act on. Do not use for external market research (use competitive-analysis), library evaluation (use library-evaluation), or technology trend assessment (use technology-radar).
testing
Use to convert a Word .docx file to PDF and/or verify its page count. Triggers on: converting docx to pdf, rendering a document, checking how many pages a docx produces, or asserting a page-count constraint (e.g. a resume must stay 2 pages). Wraps LibreOffice headless conversion.
development
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
development
Interactive wizard to craft effective prompts using Claude Code best practices