A register and planning workflow for technical debt, meaning code problems or maintenance work that make future changes harder. It finds warning signs such as TODO comments, deprecated code, stale dependencies, and unused feature flags.

Use it to scan a codebase, maintain a debt list, rank repayment work, plan it into a sprint, and mark completed items.

It prevents these issues from being forgotten or handled only when they become urgent. It helps compare their impact and effort when deciding what to fix in a sprint.

tech-debt — Skill for Claude Code by cenconq25

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add cenconq25/claude-code-app-studio --skill tech-debt

Clone the repo

git clone --depth 1 https://github.com/cenconq25/claude-code-app-studio

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/cenconq25/claude-code-app-studio/tech-debt/github.svg)](https://agentmods.dev/skills/cenconq25/claude-code-app-studio/tech-debt)

Your own site

<a href="https://agentmods.dev/skills/cenconq25/claude-code-app-studio/tech-debt"><img src="https://agentmods.dev/badge/skills/cenconq25/claude-code-app-studio/tech-debt/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/cenconq25/claude-code-app-studio/tech-debt"><img src="https://agentmods.dev/badge/skills/cenconq25/claude-code-app-studio/tech-debt.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,752 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00050	$0.01752
Opus 5	$0.00025	$0.00876
Sonnet 5	$0.00010	$0.00350
Haiku 4.5	$0.00005	$0.00175

Measured 7d ago against content hash 2cc5a3a8348e, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

tech-debt scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/tech-debt/SKILL.md · 233 lines

How it starts

The opening of the file, as written. The whole thing — 233 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Tech Debt

A debt register that lives in docs/tech-debt.md. This skill keeps the register current, scores entries on impact and effort, and recommends which entries to repay each sprint based on capacity.

Phase 1: Mode

Parse the argument:

--scan (default) — search for new debt indicators and update the register.
--register — render the current register without scanning.
--plan — propose which entries to repay in the next sprint.
--pay-down=<id> — close out a register entry once the work shipped.

Phase 2: Scan for Indicators

Grep across src/ and tests:

TODO, FIXME, HACK, XXX, KLUDGE comments. Capture file, line, comment text, author (via git blame if quick), date added.
// @deprecated / @Deprecated / [Obsolete] annotations on public APIs.
Imports of known deprecated framework APIs:
- RN: AsyncStorage from react-native (now community), legacy Navigation v4, WebView from react-native.
- iOS: pre-iOS-13 lifecycle methods, UIKit code that should be SwiftUI per the project ADR, deprecated APIs flagged by the framework reference.
- Android: deprecated AsyncTask, old support libs (android.support.*), pre-Compose Views in Compose-target areas.
- Flutter: pre-3.0 widget APIs, RaisedButton, etc.
Dependency files: parse manifests for outdated versions.
- npm outdated --json
- flutter pub outdated --machine
- bundle outdated
- ./gradlew dependencyUpdates
Stale feature flags (cross-reference /balance-check output if available).
Code with git blame age > 18 months that has been touched recently with non-trivial regression risk — surface for review.

For each, capture: id, type, location, age, last-touched date.

Phase 3: Score Each Entry

Per entry, derive:

Impact (0-3) — how much harm if left?
- 0: cosmetic
- 1: minor maintainability cost
- 2: blocks a known upcoming feature, performance, or security issue
- 3: production risk (deprecated API will break in next OS / store deadline, security CVE, looming framework removal)
Effort (0-3) — to pay down:
- 0: < 1 hour
- 1: 1-4 hours
- 2: half-day to two days
- 3: > 2 days
Priority = Impact - (0.5 * Effort), high to low.

Read the full file on GitHub · 233 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

7d ago First seen · 233 lines · 50 tokens per session scan A 2cc5a3a8348e

Subscribe to this mod's changes

tech-debt is a skill published in the GitHub repository cenconq25/claude-code-app-studio (40 stars, last pushed 4mo ago), licensed MIT. It adds 50 tokens to every session and 1,752 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Project management

recipe-create-meet-space

Create a Google Meet meeting space and share the join link.

googleworkspace/cli · 18 tokens

workthreads

SpecStory Workthreads - a weekly work-thread rollup across a team's repos from SpecStory coding histories (any agent - Claude Code, Codex, Cursor, Gemini, and more). It groups the window's sessions into threads of work per project and labels each new / open / recently closed, so a lead sees what shipped, what is still…

specstoryai/getspecstory · 126 tokens

atmos-config

Atmos root configuration: atmos.yaml discovery, precedence, deep merging, basepath, imports, minimal bootstrap, and routing to narrower Atmos skills.

cloudposse/atmos · 31 tokens

story-readiness

Validate that a story file is implementation-ready. Checks for embedded GDD requirements, ADR references, engine notes, clear acceptance criteria, and no open design questions. Produces READY / NEEDS WORK / BLOCKED verdict with specific gaps. Use when user says 'is this story ready', 'can I start on this story', 'is…

Donchitos/Claude-Code-Game-Studios · 77 tokens

autotask-creator

Rules for automation CRUD from the group-chat commander. The commander does not call mutation tools and does not edit cloud/autotasks files directly. It emits one or more top-level ... containers in its final text; the bus parses and applies them after the turn.

Orkas-AI/Orkas · 5 tokens

remove

Remove a deployed framework or addon from the current workspace.

jmagly/aiwg · 12 tokens