analysis
について
このスキルは、GitHubのIssueを分析して機能要件を抽出し、技術的な実現可能性を評価し、依存関係とセキュリティリスクを特定します。新規機能開発を開始する際に、開発者が実装範囲と潜在的な課題を理解するのに役立ちます。GitHub MCPツールを活用して、Issueとその受け入れ基準を体系的に解析します。
クイックインストール
Claude Code
推奨/plugin add https://github.com/matteocervelli/llmsgit clone https://github.com/matteocervelli/llms.git ~/.claude/skills/analysisこのコマンドをClaude Codeにコピー&ペーストしてスキルをインストールします
ドキュメント
Feature Analysis Skill
Purpose
This skill provides systematic analysis of feature requirements from GitHub issues, evaluating technical feasibility, dependencies, security implications, and implementation scope.
When to Use
- Starting feature implementation from a GitHub issue
- Need to understand requirements and acceptance criteria
- Evaluating technical approach and dependencies
- Identifying security considerations early
- Scoping effort and potential risks
Analysis Workflow
1. Requirements Extraction
From GitHub Issue:
- Parse issue title, description, and acceptance criteria
- Extract functional and non-functional requirements
- Identify user stories and use cases
- Review issue comments for clarifications
- Check linked issues and dependencies
Deliverable: Structured requirements list with priorities
2. Technical Stack Evaluation
Assess Technology Fit:
- Review project's TECH-STACK.md for current technologies
- Identify required libraries/frameworks
- Check version compatibility
- Evaluate performance implications
- Consider maintenance burden
Tools to Use:
- Read TECH-STACK.md and relevant documentation
- Use
scripts/analyze_deps.pyfor dependency analysis - Grep codebase for similar patterns
Deliverable: Technology recommendations with rationale
3. Dependency Analysis
Identify Dependencies:
- External libraries (pip/npm/cargo packages)
- Internal modules and services
- Database schema changes
- API contracts
- Configuration requirements
Check for Conflicts:
# Use the analyze_deps script
python scripts/analyze_deps.py --feature <feature-name>
Deliverable: Dependency map with conflict analysis
4. Security Assessment
Review Security Implications:
- Authentication/authorization requirements
- Input validation needs
- Data sensitivity (PII, credentials, etc.)
- API security (rate limiting, CORS, etc.)
- Dependency vulnerabilities
Use Checklist:
Refer to security-checklist.md for systematic review
Deliverable: Security risk assessment and mitigation plan
5. Scope Definition
Define Boundaries:
- Core functionality (must-have)
- Extended functionality (should-have)
- Future enhancements (could-have)
- Out of scope (won't-have)
Estimate Complexity:
- Lines of code (rough estimate)
- Number of modules/files
- Test coverage requirements
- Documentation needs
Deliverable: Scope statement with effort estimate
Output Format
Create an analysis report with:
# Feature Analysis: [Feature Name]
## Requirements Summary
- [ ] Requirement 1
- [ ] Requirement 2
...
## Technical Approach
**Recommended Stack:** Python 3.9+, pytest, pydantic
**Key Libraries:** [list]
**Architecture Pattern:** [pattern]
## Dependencies
**External:**
- package-name==version (reason)
**Internal:**
- module.submodule (reason)
## Security Considerations
**Risk Level:** Low/Medium/High
**Key Concerns:**
- [concern 1]: [mitigation]
## Scope
**In Scope:**
- [feature 1]
**Out of Scope:**
- [deferred item]
**Effort Estimate:** [hours/days]
## Recommendations
1. [Recommendation 1]
2. [Recommendation 2]
Best Practices
Requirements Analysis:
- Always check requirements-checklist.md for completeness
- Clarify ambiguous requirements before proceeding
- Document assumptions explicitly
- Consider edge cases and error scenarios
Technical Evaluation:
- Prefer existing project patterns over new approaches
- Consider maintainability over cleverness
- Check for similar existing implementations
- Evaluate performance implications early
Security First:
- Run security-checklist.md for all features
- Flag high-risk items for review
- Never skip input validation planning
- Consider data privacy implications
Scope Management:
- Be conservative with estimates
- Identify MVP vs. enhanced features
- Call out dependencies that block progress
- Document what's explicitly out of scope
Supporting Resources
- requirements-checklist.md: Systematic requirements validation
- security-checklist.md: Security considerations framework
- scripts/analyze_deps.py: Automated dependency analysis
Example Usage
# 1. Fetch issue details
Use mcp__github-mcp__get_issue to retrieve issue #<number>
# 2. Review requirements
Work through requirements-checklist.md systematically
# 3. Analyze dependencies
python scripts/analyze_deps.py --feature feature-name
# 4. Security review
Complete security-checklist.md
# 5. Generate analysis report
Create report in docs/implementation/feature-name-analysis.md
Integration with Feature Implementation Flow
Input: GitHub issue number Process: Systematic analysis using checklists and scripts Output: Analysis report + recommendations Next Step: Design skill for architecture planning
GitHub リポジトリ
関連スキル
content-collections
メタThis skill provides a production-tested setup for Content Collections, a TypeScript-first tool that transforms Markdown/MDX files into type-safe data collections with Zod validation. Use it when building blogs, documentation sites, or content-heavy Vite + React applications to ensure type safety and automatic content validation. It covers everything from Vite plugin configuration and MDX compilation to deployment optimization and schema validation.
creating-opencode-plugins
メタThis skill provides the structure and API specifications for creating OpenCode plugins that hook into 25+ event types like commands, files, and LSP operations. It offers implementation patterns for JavaScript/TypeScript modules that intercept and extend the AI assistant's lifecycle. Use it when you need to build event-driven plugins for monitoring, custom handling, or extending OpenCode's capabilities.
polymarket
メタThis skill enables developers to build applications with the Polymarket prediction markets platform, including API integration for trading and market data. It also provides real-time data streaming via WebSocket to monitor live trades and market activity. Use it for implementing trading strategies or creating tools that process live market updates.
cloudflare-turnstile
メタThis skill provides comprehensive guidance for implementing Cloudflare Turnstile as a CAPTCHA-alternative bot protection system. It covers integration for forms, login pages, API endpoints, and frameworks like React/Next.js/Hono, while handling invisible challenges that maintain user experience. Use it when migrating from reCAPTCHA, debugging error codes, or implementing token validation and E2E tests.
