feat(skills): add repo-scan skill#911
Conversation
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
📝 WalkthroughWalkthroughAdded a new documentation file Changes
Sequence Diagram(s)sequenceDiagram
participant User as User / Orchestrator
participant Scanner as RepoScanner
participant LibDB as Library DB
participant AI as AI Analyzer
participant Reporter as Report Generator
participant Output as HTML Report
User->>Scanner: Start scan (repo, mode)
Scanner->>LibDB: Lookup signatures & known libs
LibDB-->>Scanner: Matches + versions
Scanner->>AI: Emit modules, file classifications, metadata
AI->>AI: Analyze, detect embedded libs, assign verdicts
AI-->>Reporter: Findings + per-module verdicts
Reporter->>Output: Generate interactive dark-themed HTML (summary + drills)
Output-->>User: Deliver report
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![cubic-dev-ai[bot]](https://cdn.github.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
No issues found across 1 file
Since this is your first cubic review, here's how it works:
- cubic automatically reviews your code and comments on bugs and improvements
- Teach cubic by replying to its comments. cubic learns from your replies and gets better over time
- Add one-off context when rerunning by tagging
@cubic-dev-aiwith guidance or docs links (includingllms.txt) - Ask questions if you need clarification on any suggestion
Greptile SummaryThis PR adds a new community skill Key findings:
Confidence Score: 4/5Safe to merge after fixing the install script cleanup issue; the P1 defect affects every user's first install experience. One P1 finding (install script leaves temp directory and is not idempotent) should be addressed before merge. The remaining P2 issues are improvements to install script quality and documentation completeness that don't block core functionality. skills/repo-scan/SKILL.md — specifically the Installation bash block (lines 21-28) Important Files Changed
Sequence DiagramsequenceDiagram
participant User
participant CWD as Current Working Dir
participant GH as GitHub (haibindev/repo-scan)
participant Dest as ~/.claude/skills/repo-scan
User->>CWD: mkdir -p ~/.claude/skills/repo-scan
User->>CWD: git init repo-scan (creates temp dir)
User->>CWD: cd repo-scan
User->>GH: git fetch --depth 1 origin 2742664
GH-->>CWD: commit contents
User->>CWD: git checkout --detach FETCH_HEAD
User->>Dest: cp -r . (copies files + .git/)
Note over CWD: temp repo-scan/ never deleted
Note over Dest: .git/ dir included unnecessarily
User->>User: Session left inside repo-scan/ dir
|
![coderabbitai[bot]](https://cdn.github.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 3
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@skills/repo-scan/SKILL.md`:
- Line 58: Rename the section header "Real-World Example" to "Examples" in the
SKILL.md so the document follows the required skill documentation format; locate
the header string "Real-World Example" and replace it with "Examples", ensuring
the surrounding sections remain 'When to Use' and 'How It Works' and that any
internal references to the old header are updated accordingly.
- Line 52: The section header "## Workflow" in SKILL.md should be renamed to "##
How It Works" to conform to the skill documentation standard; locate the header
string "## Workflow" in skills/repo-scan/SKILL.md and replace it with "## How It
Works" so the file uses the required 'When to Use', 'How It Works', and
'Examples' section naming convention.
- Line 15: Rename the section header "When to Activate" to "When to Use" in the
SKILL.md content; update the heading text exactly from "When to Activate" to
"When to Use" and verify the Skills file follows the required sections sequence
('When to Use', 'How It Works', 'Examples') so formatting and section names
match the coding guidelines.
There was a problem hiding this comment.
1 issue found across 1 file (changes from recent commits).
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="skills/repo-scan/SKILL.md">
<violation number="1" location="skills/repo-scan/SKILL.md:26">
P1: Installation instructions clone unpinned code from an external repository, creating supply-chain and reproducibility risk.</violation>
</file>
Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
|
thanks, queued for review. if there are user-facing behavior changes or docs impacts, please add a short note in the PR body. |
There was a problem hiding this comment.
1 issue found across 1 file (changes from recent commits).
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="skills/repo-scan/SKILL.md">
<violation number="1" location="skills/repo-scan/SKILL.md:26">
P2: Installation instructions use `git fetch` with a raw commit hash refspec, which fails (`couldn't find remote ref`) and can break the documented install flow.</violation>
</file>
Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
| git init repo-scan | ||
| cd repo-scan | ||
| git remote add origin https://github.com/haibindev/repo-scan.git | ||
| git fetch --depth 1 origin 2742664 |
There was a problem hiding this comment.
P2: Installation instructions use git fetch with a raw commit hash refspec, which fails (couldn't find remote ref) and can break the documented install flow.
Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At skills/repo-scan/SKILL.md, line 26:
<comment>Installation instructions use `git fetch` with a raw commit hash refspec, which fails (`couldn't find remote ref`) and can break the documented install flow.</comment>
<file context>
@@ -17,12 +17,16 @@ origin: community
+git init repo-scan
+cd repo-scan
+git remote add origin https://github.com/haibindev/repo-scan.git
+git fetch --depth 1 origin 2742664
+git checkout --detach FETCH_HEAD
+cp -r . ~/.claude/skills/repo-scan
</file context>
feat(skills): add repo-scan skill
feat(skills): add repo-scan skill
2 participants
Summary
Adds repo-scan, a cross-stack source code asset audit skill for Claude Code.
Tested on: 50,000+ file C++ monorepo — identified legacy FFmpeg 2.x, 3x duplicated SDK wrappers, and 636 MB committed build artifacts.
Repository: https://github.com/haibindev/repo-scan
Checklist
Summary by cubic
Add
repo-scan, a cross-stack source code audit skill for C/C++, Java/Android, iOS, and Web with interactive HTML reports; installation is now pinned and shallow-fetched for reproducible, safer installs.New Features
fast,standard,deep,fullBug Fixes
SKILL.md: shallow fetch and copy only a pinned commitWritten for commit dcc4d91. Summary will update on new commits.
Summary by CodeRabbit