analyze-project

analyze-project is a skill for Claude Code, Codex from forthends/clockwork. It costs 0 tokens per session (1,249 once invoked), scanned A, original, MIT.

A repository-analysis skill that scans a code project’s dependency and configuration files, then creates a structured overview of its technologies, features, modules, and setup.

In plain words
What is it for?
Use it when a repository is added under repos/ or substantially changed. It helps document the stack, runtime environment, infrastructure, development tools, and project structure.
Why use it?
It removes the need to build a project summary by hand or inspect many files before understanding an unfamiliar codebase. It can also refresh the summary after major changes.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it when a repository is added under repos/ or substantially changed. It helps document the stack, runtime environment, infrastructure, development tools, and project structure.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/forthends/clockwork/analyze-project
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add forthends/clockwork --skill analyze-project
Clone the repo
git clone --depth 1 https://github.com/forthends/clockwork

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for analyze-project

README.md
[![agentmods](https://agentmods.dev/badge/skills/forthends/clockwork/analyze-project/github.svg)](https://agentmods.dev/skills/forthends/clockwork/analyze-project)
Your own site
<a href="https://agentmods.dev/skills/forthends/clockwork/analyze-project"><img src="https://agentmods.dev/badge/skills/forthends/clockwork/analyze-project/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for analyze-project

Your own site · 80×15
<a href="https://agentmods.dev/skills/forthends/clockwork/analyze-project"><img src="https://agentmods.dev/badge/skills/forthends/clockwork/analyze-project.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,249 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.01249
Opus 5.5 $0.00000 $0.00500
Sonnet 5.5 $0.00000 $0.00250
Haiku 4.5 $0.00000 $0.00125

Measured 2mo ago against content hash 752060c3ec99, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

analyze-project scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/analyze-project/SKILL.md · 127 lines

How it starts

The opening of the file, as written. The whole thing — 127 lines — stays where its author put it; the contents beside it link to each section on GitHub.

分析项目代码仓库


技能信息

  • 技能名称:分析项目代码仓库
  • 技能标识:analyze-project
  • 一句话说明:深度扫描 repos/ 下的代码仓库,提取技术栈、功能说明和模块划分,生成结构化的项目简介
  • 适用角色:Analyst

触发条件

当以下条件满足时,应调用本技能:

  • 新的代码仓库被挂载到 repos/ 下,需要生成项目简介
  • 项目发生重大变更(如技术栈升级、模块重构),需要更新项目简介
  • 其他角色 Agent 需要项目上下文,但对应的项目简介尚不存在

前置条件

调用本技能前,必须确保:

  1. 目标代码仓库已存在于 repos/<repo-name>/ 目录
  2. docs/projects/<repo-name>/ 目录已创建(如不存在则创建)

执行步骤

第一步:扫描依赖管理文件 → 提取技术栈

按语言类型查找并读取依赖管理文件:

语言/平台 文件 提取内容
Node.js package.json 运行时版本、dependencies、devDependencies、scripts
Java pom.xml / build.gradle JDK 版本、Spring Boot 版本、核心依赖
Go go.mod Go 版本、module 名称、依赖列表
Python pyproject.toml / requirements.txt Python 版本、核心依赖
Rust Cargo.toml Rust edition、核心依赖
.NET *.csproj / *.sln .NET 版本、NuGet 依赖

对提取到的依赖进行分类:

  • 语言与运行时:编程语言、运行时版本
  • 核心框架:Web 框架、ORM、状态管理等
  • 基础设施:数据库、缓存、消息队列、对象存储等
  • 开发工具链:构建工具、测试框架、Lint 工具等

第二步:扫描配置文件 → 提取运行时环境

读取以下文件(如存在):

  • docker-compose.yml / Dockerfile → 容器化方案和中间件依赖
  • .env.example / .env.template → 需要的环境变量(不读取实际 .env)
  • CI/CD 配置(.github/workflows/、Jenkinsfile 等)→ 构建和部署流程
  • nginx.conf / 反向代理配置 → 部署架构

第三步:分析目录结构 → 提取模块划分

  1. 列出项目顶层目录结构(2-3 层深度)
  2. 识别核心源码目录(src/、lib/、app/、cmd/ 等)
  3. 对每个主要模块/目录:
    • 确定模块职责(基于目录名、文件内容)
    • 识别模块间依赖关系(基于 import/require 语句)
    • 标记核心模块和辅助模块

第四步:分析入口文件 → 提取功能概览

  1. 找到应用入口(main.*、app.*、index.*)
  2. 扫描路由定义(API endpoints、页面路由等)
  3. 读取现有 README.md(如有)补充功能描述
  4. 汇总为功能清单,按业务领域分组

第五步:生成项目简介

  1. 读取模板 workflow/_templates/project-overview.md
  2. 按模板结构填写各章节内容
  3. 保存到 docs/projects/<repo-name>/overview.md

输入

输入 来源 说明
代码仓库 repos/<repo-name>/ 待分析的完整代码仓库
项目简介模板 workflow/_templates/project-overview.md 文档结构模板

输出

输出 路径 说明
项目简介 docs/projects/<repo-name>/overview.md 结构化的项目简介文档

质量检查

完成项目简介后,对照以下清单自检:

  • tech_stack 章节是否列出了所有主要技术组件及版本
  • 技术栈信息是否来源于依赖管理文件(非猜测)
  • project_features 章节是否涵盖了项目的核心功能
  • 功能描述是否基于代码分析而非仅靠 README
  • module_structure 章节是否包含目录结构图
  • 每个模块的职责描述是否清晰
  • 模块间依赖关系是否有标注
  • 是否有敏感信息泄露(密码、API Key 等)
  • 不确定的内容是否标注了 [待确认]

Read the full file on GitHub · 127 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 127 lines · 0 tokens per session scan A 752060c3ec99

Subscribe to this mod's changes

analyze-project is a skill published in the GitHub repository forthends/clockwork (8 stars, last pushed 16d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,249 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

insight-error-page

Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…

vercel/next.js · 83 tokens