skills/council/scout/library-evaluation/SKILL.md
Use when adding new packages, choosing between dependency alternatives, or auditing existing libraries. Covers popularity metrics, maintenance health, bundle impact, API quality, and license compatibility with weighted scoring. Do not use for evaluating frameworks or platforms (use technology-radar) or comparing competing products (use competitive-analysis).
npx skillsauth add dtsong/my-claude-setup library-evaluationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Produce a structured, weighted comparison of candidate libraries to make dependency decisions based on evidence rather than familiarity or hype.
No user-provided values are used in commands or file paths. All inputs are treated as read-only analysis targets.
For each candidate:
For each candidate:
For each candidate:
For each candidate:
For each candidate:
Compaction resilience: If context was compacted, re-read this SKILL.md and check the Progress Checklist for completed steps before continuing.
| Criterion | Weight | Candidate A | Candidate B | Candidate C | |-----------|--------|-------------|-------------|-------------| | Weekly downloads | ... | .../5 | .../5 | .../5 | | Maintenance health | ... | .../5 | .../5 | .../5 | | Bundle size | ... | .../5 | .../5 | .../5 | | TypeScript support | ... | .../5 | .../5 | .../5 | | API quality | ... | .../5 | .../5 | .../5 | | License | ... | .../5 | .../5 | .../5 | | Weighted Total | | ... | ... | ... |
Recommended: [Library Name] Rationale: [2-3 sentence justification referencing the top differentiating factors] Risks: [Known risks or caveats with the recommendation] Migration notes: [If replacing an existing dependency, key migration steps]
development
Use when planning implementation steps, deciding commit format, or structuring development approach. Provides brainstorm-plan-implement flow with conventional commits. Triggers on 'how should I approach this', 'commit format'.
development
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
development
Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices".
development
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.