360 Secure SkillHub
360 安全技能中心

Tech Stack Evaluator

该 Skill 用于技术栈评估:比较框架和云服务,计算 5 年 TCO,分析 GitHub/npm 生态健康,评估安全合规和迁移风险,并按快速比较、标准分析或完整报告输出建议。支持文本、YAML、JSON 输入及 Python 脚本计算。

alirezarezvani
alirezarezvani
热度 61.97
最近更新 2026-05-11 15:54:25
分类:数据依赖:代码执行 / 读写文件应用场景:研究 / 报告撰写 / 推荐 / 财务 ...

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add tech-stack-evaluator
Metadata
name
tech-stack-evaluator
description
Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing migration paths, or analyzing ecosystem viability.

Technology Stack Evaluator

Evaluate and compare technologies, frameworks, and cloud providers with data-driven analysis and actionable recommendations.

Table of Contents


Capabilities

Capability Description
Technology Comparison Compare frameworks and libraries with weighted scoring
TCO Analysis Calculate 5-year total cost including hidden costs
Ecosystem Health Assess GitHub metrics, npm adoption, community strength
Security Assessment Evaluate vulnerabilities and compliance readiness
Migration Analysis Estimate effort, risks, and timeline for migrations
Cloud Comparison Compare AWS, Azure, GCP for specific workloads

Quick Start

Compare Two Technologies

Compare React vs Vue for a SaaS dashboard.
Priorities: developer productivity (40%), ecosystem (30%), performance (30%).

Calculate TCO

Calculate 5-year TCO for Next.js on Vercel.
Team: 8 developers. Hosting: $2500/month. Growth: 40%/year.

Assess Migration

Evaluate migrating from Angular.js to React.
Codebase: 50,000 lines, 200 components. Team: 6 developers.

Input Formats

The evaluator accepts three input formats:

Text - Natural language queries

Compare PostgreSQL vs MongoDB for our e-commerce platform.

YAML - Structured input for automation

comparison:
  technologies: ["React", "Vue"]
  use_case: "SaaS dashboard"
  weights:
    ecosystem: 30
    performance: 25
    developer_experience: 45

JSON - Programmatic integration

{
  "technologies": ["React", "Vue"],
  "use_case": "SaaS dashboard"
}

Analysis Types

Quick Comparison (200-300 tokens)

  • Weighted scores and recommendation
  • Top 3 decision factors
  • Confidence level

Standard Analysis (500-800 tokens)

  • Comparison matrix
  • TCO overview
  • Security summary

Full Report (1200-1500 tokens)

  • All metrics and calculations
  • Migration analysis
  • Detailed recommendations

Scripts

stack_comparator.py

Compare technologies with customizable weighted criteria.

python scripts/stack_comparator.py --help

tco_calculator.py

Calculate total cost of ownership over multi-year projections.

python scripts/tco_calculator.py --input assets/sample_input_tco.json

ecosystem_analyzer.py

Analyze ecosystem health from GitHub, npm, and community metrics.

python scripts/ecosystem_analyzer.py --technology react

security_assessor.py

Evaluate security posture and compliance readiness.

python scripts/security_assessor.py --technology express --compliance soc2,gdpr

migration_analyzer.py

Estimate migration complexity, effort, and risks.

python scripts/migration_analyzer.py --from angular-1.x --to react

References

Document Content
references/metrics.md Detailed scoring algorithms and calculation formulas
references/examples.md Input/output examples for all analysis types
references/workflows.md Step-by-step evaluation workflows

Confidence Levels

Level Score Interpretation
High 80-100% Clear winner, strong data
Medium 50-79% Trade-offs present, moderate uncertainty
Low < 50% Close call, limited data

When to Use

  • Comparing frontend/backend frameworks for new projects
  • Evaluating cloud providers for specific workloads
  • Planning technology migrations with risk assessment
  • Calculating build vs. buy decisions with TCO
  • Assessing open-source library viability

When NOT to Use

  • Trivial decisions between similar tools (use team preference)
  • Mandated technology choices (decision already made)
  • Emergency production issues (use monitoring tools)