A register and planning workflow for technical debt, meaning code problems or maintenance work that make future changes harder. It finds warning signs such as TODO comments, deprecated code, stale dependencies, and unused feature flags.

Use it to scan a codebase, maintain a debt list, rank repayment work, plan it into a sprint, and mark completed items.

It prevents these issues from being forgotten or handled only when they become urgent. It helps compare their impact and effort when deciding what to fix in a sprint.

tech-debt — Skill for Claude Code by cenconq25/claude-code-app-studio

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add cenconq25/claude-code-app-studio --skill tech-debt

Clone the repo

git clone --depth 1 https://github.com/cenconq25/claude-code-app-studio

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/cenconq25/claude-code-app-studio/tech-debt/github.svg)](https://agentmods.dev/skills/cenconq25/claude-code-app-studio/tech-debt)

Your own site

<a href="https://agentmods.dev/skills/cenconq25/claude-code-app-studio/tech-debt"><img src="https://agentmods.dev/badge/skills/cenconq25/claude-code-app-studio/tech-debt/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/cenconq25/claude-code-app-studio/tech-debt"><img src="https://agentmods.dev/badge/skills/cenconq25/claude-code-app-studio/tech-debt.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,752 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00050	$0.01752
Opus 5.5	$0.00020	$0.00701
Sonnet 5.5	$0.00010	$0.00350
Haiku 4.5	$0.00005	$0.00175

Measured 1mo ago against content hash 2cc5a3a8348e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

tech-debt scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/tech-debt/SKILL.md · 233 lines

How it starts

The opening of the file, as written. The whole thing — 233 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Tech Debt

A debt register that lives in docs/tech-debt.md. This skill keeps the register current, scores entries on impact and effort, and recommends which entries to repay each sprint based on capacity.

Phase 1: Mode

Parse the argument:

--scan (default) — search for new debt indicators and update the register.
--register — render the current register without scanning.
--plan — propose which entries to repay in the next sprint.
--pay-down=<id> — close out a register entry once the work shipped.

Phase 2: Scan for Indicators

Grep across src/ and tests:

TODO, FIXME, HACK, XXX, KLUDGE comments. Capture file, line, comment text, author (via git blame if quick), date added.
// @deprecated / @Deprecated / [Obsolete] annotations on public APIs.
Imports of known deprecated framework APIs:
- RN: AsyncStorage from react-native (now community), legacy Navigation v4, WebView from react-native.
- iOS: pre-iOS-13 lifecycle methods, UIKit code that should be SwiftUI per the project ADR, deprecated APIs flagged by the framework reference.
- Android: deprecated AsyncTask, old support libs (android.support.*), pre-Compose Views in Compose-target areas.
- Flutter: pre-3.0 widget APIs, RaisedButton, etc.
Dependency files: parse manifests for outdated versions.
- npm outdated --json
- flutter pub outdated --machine
- bundle outdated
- ./gradlew dependencyUpdates
Stale feature flags (cross-reference /balance-check output if available).
Code with git blame age > 18 months that has been touched recently with non-trivial regression risk — surface for review.

For each, capture: id, type, location, age, last-touched date.

Phase 3: Score Each Entry

Per entry, derive:

Impact (0-3) — how much harm if left?
- 0: cosmetic
- 1: minor maintainability cost
- 2: blocks a known upcoming feature, performance, or security issue
- 3: production risk (deprecated API will break in next OS / store deadline, security CVE, looming framework removal)
Effort (0-3) — to pay down:
- 0: < 1 hour
- 1: 1-4 hours
- 2: half-day to two days
- 3: > 2 days
Priority = Impact - (0.5 * Effort), high to low.

Read the full file on GitHub · 233 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 233 lines · 50 tokens per session scan A 2cc5a3a8348e

Subscribe to this mod's changes

tech-debt is a skill published in the GitHub repository cenconq25/claude-code-app-studio (42 stars, last pushed 5mo ago), licensed MIT. It adds 50 tokens to every session and 1,752 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Project management

story-readiness

Checks whether a story is ready to implement: clear acceptance criteria, no open questions, valid ADR and dependencies. Use when the user asks if a story, or the sprint's stories, are ready to start or build.

Donchitos/Claude-Code-Game-Studios · 48 tokens

recipe-create-meet-space

Create a Google Meet meeting space and share the join link.

googleworkspace/cli · 18 tokens

atmos-config

Atmos root configuration: atmos.yaml discovery, precedence, deep merging, basepath, imports, minimal bootstrap, and routing to narrower Atmos skills.

cloudposse/atmos · 31 tokens

workthreads

SpecStory Workthreads - a weekly work-thread rollup across a team's repos from SpecStory coding histories (any agent - Claude Code, Codex, Cursor, Gemini, and more). It groups the window's sessions into threads of work per project and labels each new / open / recently closed, so a lead sees what shipped, what is still…

specstoryai/getspecstory · 126 tokens

qa-project-bootstrap

Onboard a new QA engineer to an existing codebase, or audit an existing test architecture. Produces a 30-day ramp plan: codebase orientation, framework walkthrough, test architecture audit, mentorship pairing, and first-test guidance. Use when: "QA onboarding," "new tester," "ramp up," "test architecture audit,"…

petrkindlmann/qa-skills · 124 tokens

remove

Remove a deployed framework or addon from the current workspace.

jmagly/aiwg · 12 tokens