Community生产力与协作github.com

wshobson/scan

扫描代码库以生成 project-doc.md 和 AGENTS.md 文件。适用于引导新代理驱动的仓库、在架构变更后刷新项目文档,或进行增量扫描以检测漂移。首次使用运行完整扫描,后续运行智能增量扫描。支持 understand-anything + context-mode,不可用时回退到原生工具。仅在检测到架构变更且经人工确认后才更新 AGENTS.md。

scan 是什么?

wshobson/scan 是一个用于自动生成和维护项目文档的 AI 代理技能。它通过扫描代码库,生成 project-doc.md(项目文档)和 AGENTS.md(代理指南)两个关键文件,特别适合在引导新仓库、架构变更后刷新文档,或检测代码漂移时使用。该技能首次运行会执行完整扫描,后续运行则采用智能增量扫描,仅处理变更部分以节省时间。它优先使用 understand-anything 工具结合上下文模式实现高效分析,在环境不支持时自动回退到原生工具(如文件读取和 grep)。关键安全机制是:仅当检测到架构级变更(如新增模块或重构)时,才会在获取人工确认后更新 AGENTS.md,避免频繁或不必要的修改。支持在 Claude Code、Cursor、Codex 等主流 AI 开发环境中运行。

兼容平台~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/wshobson/agents/tree/main/skills/scan

Installed? Explore more 生产力与协作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →

在你喜欢的 AI 中提问

打开一个已预加载此 Agent Skill 的新对话。

文档

scan 是做什么的?

扫描代码库以生成 project-doc.md 和 AGENTS.md 文件。适用于引导新代理驱动的仓库、在架构变更后刷新项目文档,或进行增量扫描以检测漂移。首次使用运行完整扫描,后续运行智能增量扫描。支持 understand-anything + context-mode,不可用时回退到原生工具。仅在检测到架构变更且经人工确认后才更新 AGENTS.md。

工作流

该技能按以下步骤执行:

  1. 检测运行环境:检查是否支持 understand-anything 工具及其 context-mode。
  2. 执行扫描:
    • 首次运行:完整扫描整个代码库,分析所有文件结构、依赖关系和架构。
    • 后续运行:增量扫描,仅检测自上次扫描以来发生的变化。
  3. 生成文档:
    • 创建/更新 project-doc.md:包含项目概述、架构、模块说明和关键文件索引。
    • 创建/更新 AGENTS.md:包含给 AI 代理的指导说明,如开发惯例、关键文件位置和操作约束。
  4. 安全更新:仅在检测到架构变更时,提示用户确认后才更新 AGENTS.md。

使用场景

  • 引导新仓库:当为新项目或现有项目初始化 AI 代理支持时,使用 scan 生成初始文档。
  • 架构变更后:在重构、添加主要模块或更改构建系统后,运行 scan 刷新文档。
  • 漂移检测:定期运行 scan 的增量模式,快速识别文档与实际代码之间的差异。

环境兼容性

平台支持状态说明
Claude Code✅优先使用 understand-anything
Cursor✅支持上下文模式
Codex✅回退到原生工具
其他⚠️自动检测并回退

输出文件

文件用途何时更新
project-doc.md项目架构和模块文档每次扫描后更新
AGENTS.md给 AI 代理的指导仅在架构变更且经人工确认后更新

命令示例

# 在当前目录运行扫描
scan

# 强制完整扫描(忽略增量缓存)
scan --full

# 仅检测漂移(不更新文件)
scan --check

# 指定扫描深度(1=仅顶层文件,3=深层递归)
scan --depth 3

环境变量

变量名用途默认值
SKIP_AGENTS_UPDATE设置为 true 跳过 AGENTS.md 更新提示false
SCAN_DEPTH扫描目录深度5
SCAN_EXCLUDE排除的目录/文件模式(逗号分隔)node_modules,.git,dist

注意事项

  • AGENTS.md 的更新需要人工确认,以避免意外覆盖代理指令。
  • 增量扫描使用文件修改时间戳进行变化检测,因此在 git checkout 或 rebase 后可能触发完整扫描。
  • 在非常庞大的代码库中,首次完整扫描可能需要较长时间;建议使用排除选项忽略非必要目录。

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

wshobson/accessibility-compliance

Implement WCAG 2.2 compliant interfaces with mobile accessibility, inclusive design patterns, and assistive technology support. Use when auditing accessibility, implementing ARIA patterns, building for screen readers, or ensuring inclusive user experiences.

wshobson/airflow-dag-patterns

Build production Apache Airflow DAGs with best practices for operators, sensors, testing, and deployment. Use when creating data pipelines, orchestrating workflows, or scheduling batch jobs.

wshobson/angular-migration

Migrate from AngularJS to Angular using hybrid mode, incremental component rewriting, and dependency injection updates. Use when upgrading AngularJS applications, planning framework migrations, or modernizing legacy Angular code.

wshobson/anti-reversing-techniques

Understand anti-reversing, obfuscation, and protection techniques encountered during software analysis. Use this skill when analyzing malware evasion techniques, when implementing anti-debugging protections for CTF challenges, when reverse engineering packed binaries, or when building security research tools that need to detect virtualized environments.

wshobson/api-design-principles

Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers. Use when designing new APIs, reviewing API specifications, or establishing API design standards.

wshobson/architecture-decision-records

Write and maintain Architecture Decision Records (ADRs) following best practices for technical decision documentation. Use when documenting significant technical decisions, reviewing past architectural choices, or establishing decision processes.

wshobson/architecture-patterns

Implement proven backend architecture patterns including Clean Architecture, Hexagonal Architecture, and Domain-Driven Design. Use this skill when designing clean architecture for a new microservice, when refactoring a monolith to use bounded contexts, when implementing hexagonal or onion architecture patterns, or when debugging dependency cycles between application layers.

wshobson/async-python-patterns

Master Python asyncio, concurrent programming, and async/await patterns for high-performance applications. Use when building async APIs, concurrent systems, or I/O-bound applications requiring non-blocking operations.

wshobson/attack-tree-construction

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.

wshobson/auth-implementation-patterns

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.

wshobson/avoid-ai-writing

Audit and rewrite prose so it stops reading as machine-generated. Use this skill when asked to remove AI-isms, clean up AI writing, edit a draft for AI tells, audit a README, changelog, release note, PR description, or blog post for machine-sounding prose, or make text sound less like AI. Supports a detect-only mode, a rewrite mode, and an edit-in-place mode, with optional voice and context profiles.

wshobson/backtesting-frameworks

Build robust backtesting systems for trading strategies with proper handling of look-ahead bias, survivorship bias, and transaction costs. Use when developing trading algorithms, validating strategies, or building backtesting infrastructure.

wshobson/bash-defensive-patterns

Master defensive Bash programming techniques for production-grade scripts. Use when writing robust shell scripts, CI/CD pipelines, or system utilities requiring fault tolerance and safety.

wshobson/bats-testing-patterns

Master Bash Automated Testing System (Bats) for comprehensive shell script testing. Use when writing tests for shell scripts, CI/CD pipelines, or requiring test-driven development of shell utilities.

wshobson/bazel-build-optimization

Optimize Bazel builds for large-scale monorepos. Use when configuring Bazel, implementing remote execution, or optimizing build performance for enterprise codebases.

wshobson/before-you-build

Pre-build product and feature risk review for founders, product managers, and AI-assisted builders. Use this skill when the user is about to build a landing page, MVP, SaaS product, internal tool, agent workflow, or major feature and needs to check demand, positioning, monetization, retention, trust, distribution, and adoption risk before implementation starts.

wshobson/billing-automation

Build automated billing systems for recurring payments, invoicing, subscription lifecycle, and dunning management. Use when implementing subscription billing, automating invoicing, or managing recurring payment systems.

wshobson/binary-analysis-patterns

Master binary analysis patterns including disassembly, decompilation, control flow analysis, and code pattern recognition. Use when analyzing executables, understanding compiled code, or performing static analysis on binaries.

wshobson/block-no-verify-hook

Configure a PreToolUse hook to prevent AI agents from skipping git pre-commit hooks with --no-verify and other bypass flags. Use when setting up Claude Code projects that enforce commit quality gates.

wshobson/brand-landingpage

Brand-first landing page designer — runs a brand-identity interview (colors, typography, shape language), then generates and iterates on a polished landing page via Stitch with deployment-ready HTML. Use when the user asks to create, design, or build a landing page, homepage, or marketing page and has no established visual direction. Skip when they have a design mockup, need a dashboard or app UI, are working at component level, building a multi-page app, or restyling with known design tokens — use frontend-design instead.

相关技能