What problem does it solve? Teams often know a codebase has security, design-system, or quality problems but lack a measured, prioritized view of what is actually worth fixing. This Skill turns scanner output, metrics, and code signals into a small ranked set of actionable candidates without touching any code. ## Core Features & Use Cases - Dimension-agnostic measurement: Analyzes security posture, dependency advisories, design-system drift, code quality hotspots, test health, or any other named dimension using the same disciplined method. - Evidence-backed ranking: Every candidate carries verifiable evidence (commands, scanner output, churn and complexity metrics) and is ranked by impact versus effort. - Read-only guarantee: Never edits code, dependencies, plans, Git state, or external systems, making it safe to run before any planning step. - Use Case: Point it at a repository after a Dependabot alert wave to verify which advisories are reachable, group them into bounded candidates, and hand a ranked list to a planning step. ## Quick Start Use the analyze skill to audit this repository's security posture and produce a ranked list of feature-sized candidates with supporting evidence.