tech-stack-scanner
Automated technical architecture review, security assessment, scalability analysis
Best use case
tech-stack-scanner is best used when you need a repeatable AI agent workflow instead of a one-off prompt.
Automated technical architecture review, security assessment, scalability analysis
Teams using tech-stack-scanner should expect a more consistent output, faster repeated execution, less prompt rewriting.
When to use this skill
- You want a reusable workflow that can be run more than once with consistent structure.
When not to use this skill
- You only need a quick one-off answer and do not need a reusable workflow.
- You cannot install or maintain the underlying files, dependencies, or repository context.
Installation
Claude Code / Cursor / Codex
Manual Installation
- Download SKILL.md from GitHub
- Place it in
.claude/skills/tech-stack-scanner/SKILL.mdinside your project - Restart your AI agent — it will auto-discover the skill
How tech-stack-scanner Compares
| Feature / Agent | tech-stack-scanner | Standard Approach |
|---|---|---|
| Platform Support | Not specified | Limited / Varies |
| Context Awareness | High | Baseline |
| Installation Complexity | Unknown | N/A |
Frequently Asked Questions
What does this skill do?
Automated technical architecture review, security assessment, scalability analysis
Where can I find the source code?
You can find the source code on GitHub using the link provided at the top of the page.
SKILL.md Source
# Tech Stack Scanner ## Overview The Tech Stack Scanner skill provides automated technical architecture review for venture capital due diligence. It assesses technology choices, infrastructure scalability, security posture, and technical debt to inform investment decisions. ## Capabilities ### Architecture Assessment - Evaluate technology stack choices - Assess microservices vs. monolith architecture - Review database and data store choices - Analyze API design and integration patterns ### Infrastructure Review - Evaluate cloud infrastructure (AWS, GCP, Azure) - Assess scalability and auto-scaling capabilities - Review disaster recovery and backup strategies - Analyze infrastructure costs and efficiency ### Security Assessment - Review authentication and authorization - Assess data encryption practices - Check for common vulnerabilities - Evaluate security monitoring and incident response ### Scalability Analysis - Model load handling capabilities - Identify potential bottlenecks - Assess horizontal vs. vertical scaling - Review performance optimization practices ## Usage ### Scan Tech Stack ``` Input: Company technical documentation, access credentials Process: Automated scanning, architecture analysis Output: Tech stack assessment, architecture diagram ``` ### Assess Security Posture ``` Input: Security policies, system access Process: Security scanning, policy review Output: Security assessment, vulnerability report ``` ### Evaluate Scalability ``` Input: Current load, growth projections, infrastructure Process: Load modeling, bottleneck analysis Output: Scalability assessment, recommendations ``` ### Review Infrastructure Costs ``` Input: Cloud billing data, infrastructure inventory Process: Cost analysis, optimization identification Output: Cost assessment, efficiency recommendations ``` ## Assessment Categories | Category | Key Areas | |----------|-----------| | Architecture | Stack choices, patterns, technical debt | | Infrastructure | Cloud, scaling, DR, monitoring | | Security | Auth, encryption, vulnerabilities, compliance | | Performance | Response times, throughput, optimization | | DevOps | CI/CD, deployment, testing, monitoring | ## Integration Points - **Technical Due Diligence**: Core skill for tech DD - **Code Quality Analyzer**: Detailed code-level analysis - **IP Patent Analyzer**: Coordinate IP and tech review - **Technical Assessor (Agent)**: Support DD agent ## Technology Checklist - Frontend frameworks and mobile platforms - Backend languages and frameworks - Databases and data storage - Cloud infrastructure and services - Third-party integrations and dependencies - Development and deployment tools - Monitoring and observability ## Best Practices 1. Request architecture documentation upfront 2. Supplement automated scanning with interviews 3. Focus on scalability relative to growth plans 4. Assess technical debt pragmatically 5. Consider technology choices in industry context
Related Skills
browser-stack
Cross-browser and cross-device testing using BrowserStack or Sauce Labs
tech-writing-lint
Automated technical writing style and quality enforcement. Lint documentation with Vale, check for inclusive language, enforce style guides, and analyze readability metrics.
tech-writing-linter
Lint technical documentation for style, consistency, and readability
security-scanner
Run security scans including SAST, dependency scanning, and secret detection
secret-detection-scanner
Detect secrets, credentials, and sensitive data in code and configurations. Scan git history for secrets, detect API keys, tokens, passwords, check environment files, monitor CI/CD logs for exposure, generate remediation steps, and track secret rotation status.
owasp-security-scanner
Automated OWASP Top 10 vulnerability detection and assessment. Run OWASP ZAP automated scans, detect injection vulnerabilities, identify broken authentication patterns, check for sensitive data exposure, analyze security misconfigurations, and generate OWASP-compliant reports.
iac-security-scanner
Infrastructure as Code security scanning and policy enforcement for Terraform, CloudFormation, Kubernetes, and Pulumi
git-forensics-scanner
Git diff forensics for surfacing and classifying code changes for trojan detection
gcp-security-scanner
GCP security configuration scanning and hardening using Security Command Center, Forseti, and ScoutSuite
dast-scanner
Dynamic Application Security Testing execution and management. Configure and execute OWASP ZAP and Nuclei scans, run authenticated scanning, manage scan policies and scope, correlate findings with SAST results, and generate comprehensive vulnerability reports.
container-security-scanner
Container image and Kubernetes security scanning for CVEs, misconfigurations, and compliance
azure-security-scanner
Azure security configuration scanning and hardening using Azure Security Center, Azure Policy, and ScoutSuite