← All skills
fallow
77 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By andrelandgraf/fullstackrecipes (GitHub) · coding · 23 stars · scanned at commit 4449331
Codebase intelligence for JavaScript and TypeScript. Free static layer reports quality, changed-code risk, cleanup opportunities (unused files, exports, types, dependencies), code duplication, circular dependencies, complexity hotspots, architecture boundary violations, feature flag patterns, and opt-in security candidates. Runtime coverage merges production execution data into the same health report for hot-path review, cold-path deletion confidence, and stale-flag evidence, with a single loca…
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 12 places.
Show 9 more
- .agents/skills/fallow/references/cli-reference.md, line 1469
- **Any CI**: `npx fallow --ci` — equivalent to `--format sarif --fail-on-issues --quiet` - .agents/skills/fallow/references/patterns.md, line 95
run: npx fallow dead-code --fail-on-issues --quiet - .agents/skills/fallow/references/patterns.md, line 102
run: npx fallow dead-code --ci > fallow.sarif - .agents/skills/fallow/references/patterns.md, line 178
run: npx fallow dead-code --format json --quiet --changed-since ${{ github.event.pull_request.base.sha }} --fail-on-issues - .agents/skills/fallow/references/patterns.md, line 185
run: npx fallow dupes --format json --quiet --threshold 5 --mode mild - .agents/skills/fallow/references/patterns.md, line 194
run: npx fallow dupes --format json --quiet --changed-since ${{ github.event.pull_request.base.sha }} - .agents/skills/fallow/references/patterns.md, line 291
- npx fallow dead-code --fail-on-issues --quiet --format json > fallow-results.json - .agents/skills/fallow/references/patterns.md, line 443
npx knip --reporter json - .agents/skills/fallow/references/patterns.md, line 774
- Resolves `fallow` from PATH first, then `npx --no-install fallow` as a fallback. Skips with a stderr notice if neither is available or if `jq` is missing.
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 17 places.
Show 14 more
- .agents/skills/fallow/SKILL.md, line 208
fallow dead-code --format json --quiet --unused-exports - .agents/skills/fallow/SKILL.md, line 214
fallow audit --format json --quiet --base main - .agents/skills/fallow/SKILL.md, line 222
fallow dupes --format json --quiet - .agents/skills/fallow/SKILL.md, line 232
fallow fix --dry-run --format json --quiet - .agents/skills/fallow/SKILL.md, line 246
fallow list --entry-points --format json --quiet - .agents/skills/fallow/SKILL.md, line 255
fallow dead-code --format json --quiet --production - .agents/skills/fallow/SKILL.md, line 264
fallow dead-code --format json --quiet --workspace my-package - .agents/skills/fallow/SKILL.md, line 287
fallow dead-code --format json --quiet --file src/utils.ts --file src/helpers.ts - .agents/skills/fallow/SKILL.md, line 295
fallow dead-code --format json --quiet --include-entry-exports - .agents/skills/fallow/SKILL.md, line 304
fallow dead-code --format json --quiet --trace src/utils.ts:myFunction - .agents/skills/fallow/SKILL.md, line 317
fallow migrate --dry-run - .agents/skills/fallow/SKILL.md, line 334
fallow init # creates .fallowrc.json, adds .fallow/ to .gitignore - .agents/skills/fallow/references/cli-reference.md, line 976
The second rule family is a data-driven `tainted-sink` catalogue: syntactic dangerous-sink candidates across 9 CWE categories. A candidate fires only when the r - .agents/skills/fallow/references/cli-reference.md, line 981
| `command-injection` | 78 | `child_process` `exec` / `execSync` / `spawn` / `spawnSync` (provenance-gated to `node:child_process`)
Connects to the internet
This is disclosed by the author in the skill's SKILL.md or README.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Other copies in this repository
andrelandgraf/fullstackrecipes has 1 more folder with a skill named fallow. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'fallow' ] || [ -L ~/.agents/skills/'fallow' ]; then echo 'A skill folder named fallow already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/andrelandgraf/fullstackrecipes' "$d" && git -C "$d" checkout --quiet '4449331ed5ae7cc7026ef8a1a0d5772a103467e2' -- '.agents/skills/fallow' && mkdir -p ~/.agents/skills && cp -R "$d"/'.agents/skills/fallow' ~/.agents/skills/'fallow' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'fallow' ~/.claude/skills/'fallow' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for andrelandgraf/fullstackrecipes shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/andrelandgraf/fullstackrecipes/)
Score history
| Date | Version | Score |
|---|
| 2026-11-11 | 4449331 | 77 |