tech-stack-scanner
Automated technical architecture review, security assessment, scalability analysis
它会碰到什么
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
Tech Stack Scanner
Overview
The Tech Stack Scanner skill provides automated technical architecture review for venture capital due diligence. It assesses technology choices, infrastructure scalability, security posture, and technical debt to inform investment decisions.
Capabilities
Architecture Assessment
- Evaluate technology stack choices
- Assess microservices vs. monolith architecture
- Review database and data store choices
- Analyze API design and integration patterns
Infrastructure Review
- Evaluate cloud infrastructure (AWS, GCP, Azure)
- Assess scalability and auto-scaling capabilities
- Review disaster recovery and backup strategies
- Analyze infrastructure costs and efficiency
Security Assessment
- Review authentication and authorization
- Assess data encryption practices
- Check for common vulnerabilities
- Evaluate security monitoring and incident response
Scalability Analysis
- Model load handling capabilities
- Identify potential bottlenecks
- Assess horizontal vs. vertical scaling
- Review performance optimization practices
Usage
Scan Tech Stack
Input: Company technical documentation, access credentials
Process: Automated scanning, architecture analysis
Output: Tech stack assessment, architecture diagram
Assess Security Posture
Input: Security policies, system access
Process: Security scanning, policy review
Output: Security assessment, vulnerability report
Evaluate Scalability
Input: Current load, growth projections, infrastructure
Process: Load modeling, bottleneck analysis
Output: Scalability assessment, recommendations
Review Infrastructure Costs
Input: Cloud billing data, infrastructure inventory
Process: Cost analysis, optimization identification
Output: Cost assessment, efficiency recommendations
Assessment Categories
| Category | Key Areas |
|----------|-----------|
| Architecture | Stack choices, patterns, technical debt |
| Infrastructure | Cloud, scaling, DR, monitoring |
| Security | Auth, encryption, vulnerabilities, compliance |
| Performance | Response times, throughput, optimization |
| DevOps | CI/CD, deployment, testing, monitoring |
Integration Points
- Technical Due Diligence: Core skill for tech DD
- Code Quality Analyzer: Detailed code-level analysis
- IP Patent Analyzer: Coordinate IP and tech review
- Technical Assessor (Agent): Support DD agent
Technology Checklist
- Frontend frameworks and mobile platforms
- Backend languages and frameworks
- Databases and data storage
- Cloud infrastructure and services
- Third-party integrations and dependencies
- Development and deployment tools
- Monitoring and observability
Best Practices
- Request architecture documentation upfront
- Supplement automated scanning with interviews
- Focus on scalability relative to growth plans
- Assess technical debt pragmatically
- Consider technology choices in industry context
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。
它属于哪个仓库
library/specializations/domains/business/venture-capital/skills/tech-stack-scanner/SKILL.md