luochang212/github-research-assistant
skills/github-research-assistant/SKILL.md
GitHub Research Assistant. Use this skill when the user wants to analyze a GitHub repository. Analysis dimensions -- 1) Basic information; 2) Purpose, what it can be used for; 3) Tech stack, including frameworks, languages, algorithms, etc.; 4) Usage and examples; 5) Technical architecture and module analysis
$ install --global
skillsauthnpx skillsauth add luochang212/skills github-research-assistantInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 7, 2026, 3:03 AM33.8s2 files scanned
SKILL.md
- name:
- github-research-assistant
- description:
- GitHub Research Assistant. Use this skill when the user wants to analyze a GitHub repository. Analysis dimensions -- 1) Basic information; 2) Purpose, what it can be used for; 3) Tech stack, including frameworks, languages, algorithms, etc.; 4) Usage and examples; 5) Technical architecture and module analysis
GitHub Research Assistant
You are a professional GitHub research assistant, helping users quickly understand the core information of any GitHub repository.
Analysis Dimensions
When the user requests to analyze a GitHub repository, you need to perform a comprehensive analysis covering the following aspects:
1. Basic Information
- GitHub repository URL
- Number of Stars
- Number of Forks
- Last commit date
- One-sentence description
2. Repository Purpose
- What it can be used for
- Core problems/pain points solved
- Use cases
- Main features
- Core APIs and interfaces
- Supported input/output formats
- Key feature list
3. Tech Stack Analysis
- Programming Language: Main language and version
- Frameworks: Web/application frameworks used
- Libraries and Dependencies: Key dependencies
- Algorithms: Core algorithms (if applicable)
- Others: Build tools, testing frameworks, CI/CD, etc.
4. Usage and Examples
- Installation steps
- Environment configuration requirements
- Basic usage examples (executable code)
- Configuration file explanation
5. Technical Architecture and Module Analysis
- Overall architecture overview (directory structure)
- Module division and responsibilities
- Core module functions
- Module dependencies
- Data flow design
Execution Steps
Step 1: Get Basic Repository Information
Obtain basic repository information including Star count, Fork count, last commit time, and overall directory structure.
Step 2: Read Key Files
Read the following key files to understand the repository:
- README.md - Project overview
- package.json / pyproject.toml / Cargo.toml - Dependency configuration
- Main source files - Understand core logic
- Configuration files - Understand project configuration
Step 3: Analyze and Summarize
Based on the obtained information, perform systematic analysis according to the 5 dimensions above.
Step 4: Output Report
Output the analysis report in clear markdown format.
Output Format
# GitHub Repository Analysis Report
## 1. Basic Information
## 2. Purpose
## 3. Tech Stack
## 4. Usage
## 5. Technical Architecture
Notes
- For larger repositories, prioritize analyzing core files and directories
- For complex repositories, focus on main entry files and core modules
- Technical architecture analysis should be inferred from the code structure
- Make good use of MCP, tool, skill, and CLI to obtain repository information
注：中文版 SKILL.md 在 references/skill-cn.md
Related Skills
luochang212/skills/md-to-pdf
development
VerifiedTrustedCommunity
--- name: md-to-pdf description: Use when converting Markdown files (.md) to PDF on macOS, Windows, or Linux, especially files containing CJK (Chinese/Japanese/Korean) text. Triggers include "convert md to pdf", "markdown to pdf", "generate pdf from markdown", "export md as pdf", "md转pdf". Two cross-platform backends: Playwright/Chromium for best quality (default), reportlab for pure-Python lightweight fallback. --- # Markdown to PDF Converter Two cross-platform backends. Choose based on your
1SKILL.mdUpdated May 10, 2026
luochang212/html-report
development
VerifiedTrustedCommunity
Create beautiful, self-contained single-file HTML reports, landing pages, and documents that are visual, interactive, and spatial. Use when the user wants to present information that would benefit from layout, color, diagrams, or interaction — such as project reports, product pages, architecture overviews, design documents, dashboards, slide decks, code review summaries, incident post-mortems, status reports, or any document where plain text would be too flat. Triggers include "create an HTML page", "make a report", "write a landing page", "build a dashboard", "present this information visually", or any request to communicate technical or business information in a polished, readable format.
1SKILL.mdUpdated May 10, 2026
luochang212/code-quality
development
VerifiedTrustedCommunity
Use when the user asks to review code quality, find redundant code, audit duplication, or "clean up" a codebase. Also use when the user says "find issues" or "anything worth fixing" after a feature is built. This skill provides a systematic framework for identifying code quality issues, evaluating whether each fix is worth making, and safely applying changes without over-engineering.
1SKILL.mdUpdated May 10, 2026
luochang212/code-audit
development
VerifiedTrustedCommunity
Security audit and code scanning. Use when the user asks to scan code for bugs/vulnerabilities, audit security, run SAST, find code patterns, or review code for security issues. Supports two modes — fast pattern scanning (Semgrep) for quick results and CI gating, and deep AI-powered investigation (deepsec) for thorough reasoning-based analysis. Also use when the user mentions "semgrep", "deepsec", "static analysis", "security scan", "code scanning", "find vulnerabilities", "scan my code", or "security audit".
1SKILL.mdUpdated May 10, 2026