repo-scan

Bootstrap pointer that installs the external repo-scan skill from a pinned, reviewable commit. Use when repo-scan must be installed before running its cross-stack source-code asset audit; this ECC pointer does not perform the audit itself.

By affaan-m · 2,843 installs

npx skills add affaan-m/ecc --skill repo-scan

Source repository · Upstream listing

repo scan Every ecosystem has its own dependency manager, but no tool looks across C++, Android, iOS, and Web to tell you: how much code is actually yours, what's third party, and what's dead weight. When to Use Taking over a large legacy codebase and need a structural overview Before major refactoring — identify what's core, what's duplicate, what's dead Auditing third party dependencies embedded directly in source (not declared in package managers) Preparing architecture decision records for monorepo reorganization Installation Review the source before installing any agent skill. Installation completes only the bootstrap. Reload your agent harness, then invoke repo scan again. This ECC pointer installs the external skill but does not run a scan itself. Core Capabilities Capability Description Cross stack scanning C/C++, Java/Android, iOS (OC/Swift), Web (TS/JS/Vue) in one pass File classification Every file tagged as project code, third party, or build artifact Library detection 50+ known libraries (FFmpeg, Boost, OpenSSL…) with version extraction Four level verdicts Core Asset / Extract & Merge / Rebuild / Deprecate HTML reports Interactive dark theme pages with drill down navigation Monorepo support Hierarchical scanning with summary + sub project reports Analysis Depth Levels Level Files Read Use Case fast 1 2 per module Quick inventory of huge directories standard 2 5 per module Default audit with full dependency + architecture checks deep 5 10 per module Adds thread safety, memory management, API consistency full All files Pre merge comprehensive review How It Works 1. Classify the repo surface : enumerate files, then tag each as project code, embedded third party code, or build artifact. 2. Detect embedded libraries : inspect directory names, headers, license files, and version markers to identify bundled dependencies and likely versions. 3. Score each module : group files by module or subsystem, then assign one of the four verdicts based on ownership, duplication, and maintenance cost. 4. Highlight structural risks : call out dead weight artifacts, duplicated wrappers, outdated vendored code, and modules that should be extracted, rebuilt, or deprecated. 5. Produce the report : return a concise summary plus the interactive HTML output with per module drill down so the audit can be reviewed asynchronously. Examples On a 50,000 file C++ monorepo: Found FFmpeg 2.x (2015 vintage) still in production Discovered the same SDK wrapper duplicated 3 times Identified 636 MB of committed Debug/ipch/obj build artifacts Classified: 3 MB project code vs 596 MB third party Best Practices Start with standard depth for first time audits Use fast for monorepos with 100+ modules to get a quick inventory Run deep incrementally on modules flagged for refactoring Review the cross module analysis for duplicate detection across sub projects Links [GitHub Repository](https://github.com/haibindev/repo scan)