跳到主要内容
知仓学习社ZHICANG

tech-stack-evaluator

Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, eval…

读凭据写文件严重 0 · 高危 1alirezarezvani/claude-skills

它会碰到什么

扫了多少15 个文本文件,143 KB
它会碰到什么读凭据写文件
命中总数2 处
命中统计严重 0 · 高 1 · 中 1 · 低 0
逐条看命中(1 条严重或高危)
  • scripts/report_generator.py:38cred-envread
    if os.getenv('CLAUDE_DESKTOP'):

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Technology Stack Evaluator

Evaluate and compare technologies, frameworks, and cloud providers with data-driven analysis and actionable recommendations.

Table of Contents

  • [Capabilities](#capabilities)
  • [Quick Start](#quick-start)
  • [Input Formats](#input-formats)
  • [Analysis Types](#analysis-types)
  • [Scripts](#scripts)
  • [References](#references)

Capabilities

| Capability | Description |

|------------|-------------|

| Technology Comparison | Compare frameworks and libraries with weighted scoring |

| TCO Analysis | Calculate 5-year total cost including hidden costs |

| Ecosystem Health | Assess GitHub metrics, npm adoption, community strength |

| Security Assessment | Evaluate vulnerabilities and compliance readiness |

| Migration Analysis | Estimate effort, risks, and timeline for migrations |

| Cloud Comparison | Compare AWS, Azure, GCP for specific workloads |


Quick Start

Compare Two Technologies

Compare React vs Vue for a SaaS dashboard.
Priorities: developer productivity (40%), ecosystem (30%), performance (30%).

Calculate TCO

Calculate 5-year TCO for Next.js on Vercel.
Team: 8 developers. Hosting: $2500/month. Growth: 40%/year.

Assess Migration

Evaluate migrating from Angular.js to React.
Codebase: 50,000 lines, 200 components. Team: 6 developers.

Input Formats

The evaluator accepts three input formats:

Text - Natural language queries

Compare PostgreSQL vs MongoDB for our e-commerce platform.

YAML - Structured input for automation

comparison:
  technologies: ["React", "Vue"]
  use_case: "SaaS dashboard"
  weights:
    ecosystem: 30
    performance: 25
    developer_experience: 45

JSON - Programmatic integration

{
  "technologies": ["React", "Vue"],
  "use_case": "SaaS dashboard"
}

Analysis Types

Quick Comparison (200-300 tokens)

  • Weighted scores and recommendation
  • Top 3 decision factors
  • Confidence level

Standard Analysis (500-800 tokens)

  • Comparison matrix
  • TCO overview
  • Security summary

Full Report (1200-1500 tokens)

  • All metrics and calculations
  • Migration analysis
  • Detailed recommendations

Scripts

stack_comparator.py

Compare technologies with customizable weighted criteria.

python scripts/stack_comparator.py --help

tco_calculator.py

Calculate total cost of ownership over multi-year projections.

python scripts/tco_calculator.py --input assets/sample_input_tco.json

ecosystem_analyzer.py

Analyze ecosystem health from GitHub, npm, and community metrics.

python scripts/ecosystem_analyzer.py --technology react

security_assessor.py

Evaluate security posture and compliance readiness.

python scripts/security_assessor.py --technology express --compliance soc2,gdpr

migration_analyzer.py

Estimate migration complexity, effort, and risks.

python scripts/migration_analyzer.py --from angular-1.x --to react

References

| Document | Content |

|----------|---------|

| references/metrics.md | Detailed scoring algorithms and calculation formulas |

| references/examples.md | Input/output examples for all analysis types |

| references/workflows.md | Step-by-step evaluation workflows |


Confidence Levels

| Level | Score | Interpretation |

|-------|-------|----------------|

| High | 80-100% | Clear winner, strong data |

| Medium | 50-79% | Trade-offs present, moderate uncertainty |

| Low | < 50% | Close call, limited data |


When to Use

  • Comparing frontend/backend frameworks for new projects
  • Evaluating cloud providers for specific workloads
  • Planning technology migrations with risk assessment
  • Calculating build vs. buy decisions with TCO
  • Assessing open-source library viability

When NOT to Use

  • Trivial decisions between similar tools (use team preference)
  • Mandated technology choices (decision already made)
  • Emergency production issues (use monitoring tools)

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 26,030
本站分层T1
该仓技能数846
原文件路径engineering-team/skills/tech-stack-evaluator/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 846 个技能

同名技能的其他版本

有 2 个不同仓库或目录里都有叫 tech-stack-evaluator 的技能。它们内容并不相同,别混用: