agentleFS
Eleven-MEleven-M/flowmind/skills/project-review/SKILL.md

project-review

Skill1 starsChanged 3 months agoMITView on GitHub

Project-level review and analysis skill for FlowMind. Analyze project health, dependencies, and overall quality.

  • Installs packages

15 other projects use a version of this.

Adopted by

Most recently taken up by

The file

Files
SKILL.md

Project Review Skill

Analyze project health, dependencies, and overall quality.

Features

📊 Project Health

  • Dependency analysis
  • Security audit
  • License compliance
  • Update status

📈 Code Metrics

  • Code complexity
  • Test coverage
  • Documentation coverage
  • Technical debt

🔒 Security Analysis

  • Vulnerability scanning
  • Dependency risks
  • Secret detection
  • Best practices

Trigger Patterns

"项目审查", "project review"
"依赖检查", "dependency check"
"安全审计", "security audit"
"代码质量", "code quality"
"项目健康", "project health"

Output Format

┌─────────────────────────────────────────────────────┐
│ Project Review Report                               │
├─────────────────────────────────────────────────────┤
│ Project: {project_name}                             │
│ Language: {language}                                │
│ Last Updated: {date}                                │
├─────────────────────────────────────────────────────┤
│ Health Score: {score}/100                           │
├─────────────────────────────────────────────────────┤
│ Dependencies:                                       │
│ • Total: {count}                                    │
│ • Outdated: {outdated}                              │
│ • Vulnerable: {vulnerable}                          │
├─────────────────────────────────────────────────────┤
│ Code Quality:                                       │
│ • Complexity: {level}                               │
│ • Test Coverage: {percent}%                         │
│ • Documentation: {percent}%                         │
├─────────────────────────────────────────────────────┤
│ Recommendations:                                    │
│ • {recommendation}                                  │
└─────────────────────────────────────────────────────┘

Health Checks

Dependencies

CheckDescription
OutdatedPackages needing update
VulnerableKnown security issues
UnusedUnused dependencies
LicenseLicense compliance

Code Quality

CheckDescription
ComplexityCyclomatic complexity
DuplicationCode duplication
CoverageTest coverage
DocumentationDoc coverage

Learning Integration

This skill supports FlowMind learning:

  • Review Focus: Learns what to check first
  • Severity Levels: Learns your standards
  • Auto-fix: Learns what to fix automatically
User: "先检查安全漏洞"
FlowMind: ✓ Learned: Check security first

User: [Next review]
FlowMind: [Prioritizes security checks]

Examples

Example 1: Full Project Review

User: 审查项目整体状况

FlowMind:
┌─────────────────────────────────────────────────────┐
│ Project Review Report                               │
├─────────────────────────────────────────────────────┤
│ Project: my-app                                     │
│ Language: JavaScript/Node.js                        │
│ Last Updated: 2026-06-22                            │
├─────────────────────────────────────────────────────┤
│ Health Score: 82/100                                │
├─────────────────────────────────────────────────────┤
│ Dependencies:                                       │
│ • Total: 45                                         │
│ • Outdated: 8                                       │
│ • Vulnerable: 2                                     │
├─────────────────────────────────────────────────────┤
│ Code Quality:                                       │
│ • Complexity: Medium                                │
│ • Test Coverage: 76%                                │
│ • Documentation: 65%                                │
├─────────────────────────────────────────────────────┤
│ ⚠️ Issues Found:                                    │
│ • 2 vulnerable dependencies                         │
│ • 8 outdated packages                               │
│ • Low documentation coverage                        │
├─────────────────────────────────────────────────────┤
│ Recommendations:                                    │
│ • Run 'npm audit fix'                               │
│ • Update outdated packages                          │
│ • Add JSDoc comments                                │
└─────────────────────────────────────────────────────┘

Example 2: Security Audit

User: 进行安全审计

FlowMind:
┌─────────────────────────────────────────────────────┐
│ Security Audit Report                               │
├─────────────────────────────────────────────────────┤
│ Vulnerabilities: 2 found                            │
├─────────────────────────────────────────────────────┤
│ 🔴 HIGH: lodash < 4.17.21                           │
│    Prototype Pollution                              │
│    Fix: npm install lodash@latest                   │
├─────────────────────────────────────────────────────┤
│ 🟡 MEDIUM: axios < 0.21.1                           │
│    SSRF Vulnerability                               │
│    Fix: npm install axios@latest                    │
├─────────────────────────────────────────────────────┤
│ Secrets: None detected ✓                            │
│ HTTPS: All connections secure ✓                     │
└─────────────────────────────────────────────────────┘

Configuration

{
  "project-review": {
    "checks": {
      "dependencies": true,
      "security": true,
      "quality": true,
      "documentation": true
    },
    "thresholds": {
      "coverage": 80,
      "complexity": 10
    }
  }
}

Review Checklist

  • Dependencies up to date
  • No known vulnerabilities
  • Test coverage > 80%
  • Documentation complete
  • License compliant
  • No secrets in code

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.