greyhaven-ai/code-quality-analysis
grey-haven-plugins/core/skills/code-quality-analysis/SKILL.md
Multi-mode code quality analysis covering security reviews (OWASP Top 10), clarity refactoring (readability rules), synthesis analysis (cross-file issues), and DDD/DRY lenses (flags mechanical naming, primitive obsession, domain rules leaking into infrastructure, and premature abstractions via the three-occurrences-same-concept rule). Supports team-mode parallel analysis when invoked from quality-pipeline. Use when reviewing code for security vulnerabilities, improving code readability, conducting quality audits, pre-deployment checks, or when user mentions 'code quality', 'code review', 'security review', 'refactoring', 'code smell', 'OWASP', 'code clarity', 'primitive obsession', 'value object', 'ubiquitous language', 'DRY', 'premature abstraction', or 'quality audit'.
$ install --global
skillsauthnpx skillsauth add greyhaven-ai/claude-code-config code-quality-analysisInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 19, 2026, 5:08 AM4.0s5 files scanned
SKILL.md
- name:
- code-quality-analysis
- description:
- Multi-mode code quality analysis covering security reviews (OWASP Top 10), clarity refactoring (readability rules), synthesis analysis (cross-file issues), and DDD/DRY lenses (flags mechanical naming, primitive obsession, domain rules leaking into infrastructure, and premature abstractions via the three-occurrences-same-concept rule). Supports team-mode parallel analysis when invoked from quality-pipeline. Use when reviewing code for security vulnerabilities, improving code readability, conducting quality audits, pre-deployment checks, or when user mentions 'code quality', 'code review', 'security review', 'refactoring', 'code smell', 'OWASP', 'code clarity', 'primitive obsession', 'value object', 'ubiquitous language', 'DRY', 'premature abstraction', or 'quality audit'.
- # v2.0.43:
- Skills to auto-load for quality analysis subagents
- # v2.0.74:
- Restrict tools for analysis-focused work
Code Quality Analysis Skill
Multi-mode code quality specialist with security review, clarity refactoring, and synthesis analysis.
Description
Comprehensive code quality analysis including security vulnerability detection, readability improvements, and cross-file issue synthesis.
What's Included
- Examples: Security reviews, refactoring patterns, quality improvements
- Reference: OWASP Top 10, code smells, refactoring catalog
- Templates: Code review templates, security audit structures
- Checklists: Quality verification, security compliance
Modes
- Security Review - Find vulnerabilities (OWASP Top 10)
- Clarity Refactoring - Improve readability (10 rules)
- Synthesis Analysis - Cross-file issues
- Domain Lens (DDD) - Flag mechanical naming, primitive obsession, and domain rules leaking into routes/components/stores; recommend value-object or branded-type promotions
- Duplication Lens (principled DRY) - Approve extraction only when the same domain concept repeats at ≥3 sites with the same meaning; reject premature DRY and accidental-similarity extractions
Use This Skill When
- Reviewing code for security issues
- Improving code readability
- Comprehensive quality audits
- Pre-deployment checks
Related Agents
code-quality-analyzer- Automated quality analysis
Skill Version: 1.2
Related Skills
greyhaven-ai/testing-strategy
development
VerifiedTrustedCommunity
Grey Haven's comprehensive testing strategy - Vitest unit/integration/e2e for TypeScript, pytest markers for Python, >80% coverage requirement, fixture patterns, and Doppler for test environments. Use when writing tests, setting up test infrastructure, running tests, debugging test failures, improving coverage, configuring CI/CD, or when user mentions 'test', 'testing', 'pytest', 'vitest', 'coverage', 'TDD', 'test-driven development', 'unit test', 'integration test', 'e2e', 'end-to-end', 'test fixtures', 'mocking', 'test setup', 'CI testing'.
23SKILL.mdUpdated Apr 5, 2026
greyhaven-ai/test-generation
development
VerifiedTrustedCommunity
Comprehensive test suite generation with unit tests, integration tests, edge cases, and error handling. Use when generating tests for existing code, improving coverage, or creating systematic test suites. Triggers: 'generate tests', 'add tests', 'test coverage', 'write tests for', 'create test suite'.
23SKILL.mdUpdated Apr 5, 2026
greyhaven-ai/react-tanstack-testing
development
VerifiedTrustedCommunity
Specialized testing for React applications using TanStack ecosystem (Query, Router, Table, Form) with Vite and Vitest. Use when testing React + TanStack apps, mocking server state, testing router, or validating query behavior. Triggers: 'TanStack testing', 'React Query testing', 'test TanStack', 'mock query', 'router test'.
23SKILL.mdUpdated Apr 5, 2026
greyhaven-ai/tanstack-patterns
development
VerifiedTrustedCommunity
Apply Grey Haven's TanStack ecosystem patterns - Router file-based routing, Query data fetching with staleTime, and Start server functions. Use when building React applications with TanStack Start. Triggers: 'TanStack', 'TanStack Start', 'TanStack Query', 'TanStack Router', 'React Query', 'file-based routing', 'server functions'.
23SKILL.mdUpdated Apr 5, 2026