360 Secure SkillHub
360 安全技能中心

bloat-detector

核心功能为分3级渐进式扫描代码库臃肿,覆盖冗余代码、AI生成冗余、文档冗余等类别,支持指定扫描重点、生成报告。典型场景为季度维护、预发布清理、重大重构前。输入为带参数的命令,输出为不同深度的检测结果与优先级建议,附带不自动删除、dry-run预览等安全机制,适合规模较大的代码库优化,不适合活跃开发阶段或小型项目。

athola
athola
热度 62.67
最近更新 2026-08-26 21:10:58
分类:开发依赖:代码执行 / 读写文件 / 内部调用大模型应用场景:代码审查 / DevOps / 报告撰写 / 数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add nm-conserve-bloat-detector
Metadata
name
bloat-detector
description
Detects codebase bloat via dead code, duplication, complexity, and doc bloat scans
version
1.9.8
triggers
["bloat","cleanup","static-analysis","technical-debt","optimization","codebase feels large or before a release"]
metadata
{"openclaw":{"homepage":"https://github.com/athola/claude-night-market/tree/master/plugins/conserve","emoji":"🦞"}}
source
claude-night-market
source_plugin
conserve

Night Market Skill — ported from claude-night-market/conserve. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

Bloat Detector

Systematically detect and eliminate codebase bloat through progressive analysis tiers.

Bloat Categories

Category Examples
Code Dead code, God classes, Lava flow, duplication
AI-Generated Tab-completion bloat, vibe coding, hallucinated deps
Documentation Redundancy, verbosity, stale content, slop
Dependencies Unused imports, dependency bloat, phantom packages
Git History Stale files, low-churn code, massive single commits

Quick Start

Tier 1: Quick Scan (2-5 min, no tools)

/bloat-scan

Detects: Large files, stale code, old TODOs, commented blocks, basic duplication

Tier 2: Targeted Analysis (10-20 min, optional tools)

/bloat-scan --level 2 --focus code   # or docs, deps

Adds: Static analysis (Vulture/Knip), git churn hotspots, doc similarity

Tier 3: Deep Audit (30-60 min, full tooling)

/bloat-scan --level 3 --report audit.md

Adds: Cross-file redundancy, dependency graphs, readability metrics

When To Use

Do Don't
Context usage > 30% Active feature development
Quarterly maintenance Time-sensitive bugs
Pre-release cleanup Codebase < 1000 lines
Before major refactoring Tools unavailable (Tier 2/3)

When NOT To Use

  • Active feature development
  • Time-sensitive bugs
  • Codebase < 1000 lines

Confidence Levels

Level Confidence Action
HIGH 90-100% Safe to remove
MEDIUM 70-89% Review first
LOW 50-69% Investigate

Prioritization

Priority = (Token_Savings × 0.4) + (Maintenance × 0.3) + (Confidence × 0.2) + (Ease × 0.1)

Module Architecture

Tier 1 (always available):

  • See modules/quick-scan.md - Heuristics, no tools
  • See modules/git-history-analysis.md - Staleness, churn, vibe coding signatures
  • See modules/growth-analysis.md - Growth velocity, forecasts, threshold alerts

Tier 2 (optional tools):

  • See modules/code-bloat-patterns.md - Anti-patterns (God class, Lava flow)
  • See modules/ai-generated-bloat.md - AI-specific patterns (Tab bloat, hallucinations)
  • See modules/documentation-bloat.md - Redundancy, readability, slop detection
  • See modules/static-analysis-integration.md - Vulture, Knip

Shared:

  • See modules/remediation-types.md - DELETE, REFACTOR, CONSOLIDATE, ARCHIVE

Ecosystem-Level Detection

Patterns that span plugin boundaries or manifest configuration, discovered through ecosystem-wide audits.

alwaysApply Accumulation

Flag plugins with 3+ skills where alwaysApply: true. Each always-on skill injects its full text into every session, creating a baseline token floor before the user types anything. Sum the estimated_tokens fields to report total per-session cost.

Hook Registration Gaps

Compare hooks declared in plugin.json or openpackage.yml against entries in hooks.json. A hook present in hooks.json but absent from the manifest is invisible to the plugin loader and cannot be audited, versioned, or disabled through normal plugin management.

Boilerplate Footer Detection

Scan skill files for identical multi-line text blocks repeated across 10+ files (e.g., generic troubleshooting sections like "Command not found / Permission errors / Unexpected behavior"). These are copy-paste artifacts that inflate token cost without adding skill-specific value.

ToC Bloat in Skills

Skills loaded into model context gain nothing from HTML-style Tables of Contents. Detect ## Table of Contents followed by bulleted anchor-link lists. These waste tokens since the model reads sequentially, not via hyperlinks.

Unregistered Module Subdirectories

Compare files on disk in skills/*/modules/ against the modules: list in each skill's SKILL.md frontmatter. Files that exist on disk but are not listed in the manifest are invisible to progressive loading and may be dead weight or missing from the load path.

Auto-Exclusions

Always excludes: .venv, __pycache__, .git, node_modules, dist, build, vendor

Also respects: .gitignore, .bloat-ignore

Safety

  • Never auto-delete - all changes require approval
  • Dry-run support - --dry-run for previews
  • Backup branches - created before bulk changes

Related

  • bloat-auditor agent - Executes scans
  • unbloat-remediator agent - Safe remediation
  • context-optimization skill - MECW principles