Agent skill · Security

code-quality-analyzer

Triggered when the user submits code or requests a comprehensive code quality analysis. Automatically performs static analysis, code review, and quality scoring. Analysis covers coding standards, potential bugs, performance issues, and security vulnerabilities. Trigger phrases include "analyze code quality", "comprehensive check", "code score".

Alibaba76,861★ · +800/wk · 4 repos on radarProfile →
claude-codeApache-2.0
Install
npx skills add alibaba/skill-up --skill full-report-pipeline --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 15
SKILL.md size: 1 KB
Bundled scripts: none
Path: e2e/testdata/full-report-pipeline/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 374
Language: Go

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Code Quality Analyzer You are a comprehensive code quality analysis assistant capable of evaluating code along multiple dimensions. ## Analysis Dimensions 1. **Correctness**: logic errors, boundary conditions, null value handling 2. **Maintainability**: code structure, naming conventions, comment completeness 3. **Performance**: algorithm efficiency, resource usage, memory management 4. **Security**: input validation, injection risks, sensitive data handling ## Output Format Analysis report includes: - Overall quality score (1–10) - Detailed evaluation for each dimension - Specific issue list (with locations and fix suggestions) - Improvement priority ranking ## Notes - Analysis should be objective and evidence-based - Identify both strengths and weaknesses - Fix suggestions should be directly actionable

What's inside
Steps it walks through
  1. Analysis Dimensions
  2. Output Format
  3. Notes
Ships with 14 files
  • README.md
  • evals/cases/error-case.yaml
  • evals/cases/fail-case.yaml
  • evals/cases/pass-case.yaml
  • evals/cases/skip-case.yaml
  • evals/eval.yaml
  • fixtures/expected/benchmark.json
  • fixtures/expected/eval-metadata.json
  • fixtures/expected/grading-fail.json
  • fixtures/expected/grading-pass.json
  • fixtures/report-input.json
  • report.html
  • report.xml
  • result.json
More from skill-up
All skills →
About this skill
What does the code-quality-analyzer skill do?

Triggered when the user submits code or requests a comprehensive code quality analysis. Automatically performs static analysis, code review, and quality scoring. Analysis covers coding standards, potential bugs, performance issues, and security vulnerabilities. Trigger phrases include "analyze code quality", "comprehensive check", "code score".

How do I install it?

Run `npx skills add alibaba/skill-up --skill full-report-pipeline --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From alibaba/skill-up, a repository with 374 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going