agentmods.dev

code-quality-analysis

code-quality-analysis is a skill for Claude Code, Codex from Cumulocity-IoT/cumulocity-skills. It costs 90 tokens per session (7,682 once invoked), scanned A, original, Apache-2.0.

A code-review guide for Angular and Cumulocity Web SDK projects. It checks TypeScript, Angular, and Cumulocity-specific code for bugs, anti-patterns, and maintainability issues.

In plain words
What is it for?
Use it to review Angular components, services, and modules that use the Cumulocity Web SDK.
Why use it?
It helps find correctness, performance, and maintainability problems before they become harder to fix. It also checks whether code follows the conventions of the frameworks and SDK.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions AGENTS.md; mentions Codex.

not rated 5repo 9d ago A scan 90 tokens original Apache-2.0

Good fit Use it to review Angular components, services, and modules that use the Cumulocity Web SDK.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/cumulocity-iot/cumulocity-skills/code-quality-analysis
View source ↗ Cumulocity-IoT/cumulocity-skills
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Cumulocity-IoT/cumulocity-skills --skill code-quality-analysis
Clone the repo
git clone --depth 1 https://github.com/Cumulocity-IoT/cumulocity-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for code-quality-analysis

README.md
[![agentmods](https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/code-quality-analysis/github.svg)](https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/code-quality-analysis)
Your own site
<a href="https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/code-quality-analysis"><img src="https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/code-quality-analysis/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for code-quality-analysis

Your own site · 80×15
<a href="https://agentmods.dev/skills/cumulocity-iot/cumulocity-skills/code-quality-analysis"><img src="https://agentmods.dev/badge/skills/cumulocity-iot/cumulocity-skills/code-quality-analysis.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 90 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 7,682 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00090 $0.07682
Opus 5 $0.00045 $0.03841
Sonnet 5 $0.00018 $0.01536
Haiku 4.5 $0.00009 $0.00768

Measured 10d ago against content hash f0cc10d971c3, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

code-quality-analysis scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/code-quality-analysis/SKILL.md · 923 lines

How it starts

The opening of the file, as written. The whole thing — 923 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Code Quality Analysis Skill

Overview

This skill performs comprehensive code quality analysis on Angular + Cumulocity Web SDK codebases. It combines guidance from:

  1. TypeScript best practices — load the mastering-typescript skill (from https://github.com/SpillwaveSolutions/mastering-typescript-skill/tree/main/mastering-typescript)
  2. Angular documentation — fetch https://angular.dev/assets/context/llms-full.txt
  3. Cumulocity Codex — use the mcp_c8y-docs_* MCP tools to retrieve component and API references

MCP server required: The mcp_c8y-docs_* tools are served by https://c8y-codex-mcp.schplitt.workers.dev/ (server name: c8y-docs, transport: HTTP). Register it once with your agent:

claude mcp add --transport http c8y-docs https://c8y-codex-mcp.schplitt.workers.dev/

See AGENTS.md for full setup instructions and alternative config formats.

How to Run an Analysis

Step 1 — Gather Reference Material

Before analyzing any file, load the following resources in parallel:

  1. Read skills/mastering-typescript/SKILL.md
  2. Fetch https://angular.dev/assets/context/llms-full.txt (use the fetch_webpage tool)
  3. Call mcp_c8y-docs_get-codex-structure to get the full Codex map
  4. Call mcp_c8y-docs_query-codex with queries relevant to the features used in the file under review (e.g. ["css utility classes spacing", "color tokens", "widgets lazy loading"])
  5. Call mcp_c8y-docs_query-codex with queries for the C8Y SDK services in scope (e.g. ["InventoryService", "AlarmService", "MeasurementService client"]) to validate API usage

Step 2 — Identify Files to Analyze

If no specific file was provided, search for:

  • All *.component.ts files
  • All *.service.ts files
  • All *.module.ts files
  • All *.component.html files

Step 3 — Analyze Each File

Run each check below against the target file(s). For every finding:

Read the full file on GitHub · 923 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 923 lines · 90 tokens per session scan A f0cc10d971c3

Subscribe to this mod's changes

code-quality-analysis is a skill published in the GitHub repository Cumulocity-IoT/cumulocity-skills (5 stars, last pushed 9d ago), licensed Apache-2.0. It adds 90 tokens to every session and 7,682 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Code reviewDebuggingLanguagesTypeScriptangularanti-patternscode-qualitycumulocity
Related

Other skills, from other repositories

angular

Use when building, refactoring, or debugging Angular (v20/21+): standalone components, signals, zoneless change detection, @if/@for/@defer control flow, inject() DI, resource()/httpResource(), RxJS interop, NgRx SignalStore, ng CLI. NOT React (that is react), NOT Next.js (that is nextjs), NOT a TypeScript language…

ericrisco/rsc-harness · 89 tokens

verify-language

Language-specific verification for Python, TypeScript/JavaScript, and Go. Checks type safety, language idioms, and best practices. Use when asked to "verify language", "check types", or for language-specific checks.

Aurite-ai/agent-verifier · 48 tokens

code-quality

Python code-quality anti-patterns and review checks: exception-hierarchy correctness, singleton identity comparison, narrow exception handling, wildcard-import avoidance, magic-number naming, and dead-local removal. Use when reviewing or self-reviewing Python code for correctness and readability defects that linters…

bobmatnyc/claude-mpm-skills · 61 tokens

igniteui-angular-linting

Quick-reference for linting the core Ignite UI for Angular library. Covers the combined lint command (lint:lib), ESLint for TypeScript and templates, and Stylelint for Sass/SCSS styles. Use when an agent needs to run the main linters, fix lint errors, or understand the primary lint configuration. Do NOT use for…

IgniteUI/igniteui-angular · 99 tokens

TypeScript Null Safety Guardrails

Enforce null/undefined safety for changed TypeScript code and suggest safer patterns.

s977043/river-review · 23 tokens

TypeScript Strictness Guard

Enforce TypeScript strictness by reducing any/unsafe assertions and ensuring null handling.

s977043/river-review · 23 tokens