
repo-scan
Bootstrap pointer that installs the external repo-scan skill from a pinned
by affaan-mFree
Description
repo-scan is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It is a bootstrap pointer that installs an external repo-scan skill from a pinned, reviewable commit, so the agent can run it. The listing's install steps clone the repository first, so the pinned commit can be read before anything is installed. The scan it installs looks across C++, Android, iOS and web code to show how much of a codebase is the team's own, what is third-party code embedded directly in the source rather than declared in a package manager, and what is dead weight. It applies when taking over a large legacy codebase and needing a structural overview, before a major refactor, when auditing third-party code vendored into a repository, and when preparing architecture records for a monorepo reorganisation. Because it installs code from another source, review the pinned commit before running it. A skill is a SKILL.md file of instructions that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows a Gen Agent Trust Hub warning and a Snyk warning, with Socket passing.…
Highlights
- Installs a pinned external scan
- Clone first so the commit can be reviewed
- Maps own, third-party and dead code
- Covers C++, Android, iOS and web
Ratings & Reviews
No ratings yet
Be the first to rate repo-scan.
People also visit

inherit-legacy-style
Prevent AI style drift on legacy projects by scanning the codebase

perl-patterns
Modern Perl 5.36+ idioms, best practices, and conventions for building robust

context-map
Analyze codebases and map task-relevant files before implementing changes
repo-scan FAQ
What does the repo-scan skill do?
It installs an external repo-scan tool from a pinned commit so an agent can map what in a codebase is your own code, what is third-party and what is dead.
Why clone before installing?
The listing's steps clone first, so the pinned commit can be reviewed before anything is installed.
Which code does it look across?
C++, Android, iOS and web.
How do I install it?
Run: npx skills add https://github.com/affaan-m/ecc --skill repo-scan, then follow the pinned install steps.
Is it free?
Yes. It is free and open source, but the scan itself comes from an external repository.
Are there security warnings?
The skills.sh listing shows Gen Agent Trust Hub and Snyk with warnings, while Socket passes. Review the pinned commit before installing.
What are the best repo-scan alternatives?
Popular alternatives to repo-scan include inherit-legacy-style, perl-patterns and search-first. See all repo-scan alternatives








