Fallow

Trust Score 90/100

Static and runtime codebase intelligence for JavaScript/TypeScript—find unused code, duplication, circular deps, and complexity hotspots; merge runtime coverage

triggers:find unused codedetect duplicate codeaudit codebase healthcheck circular dependenciesmerge runtime coveragefallow dead-code --format json

GitHub SKILL.md

What it does

Fallow provides codebase intelligence for JavaScript and TypeScript projects. Its static analysis finds unused files/exports/types, duplicate code, circular dependencies, complexity hotspots, boundary violations, and feature-flag patterns. When runtime coverage is available, Fallow merges execution data into health reports to prioritize hot-path refactors, safely remove cold code, and produce actionable cleanup candidates.

When to use it

Audit code health before a release or refactor
Find and remove dead code (unused files, exports, types, deps)
Detect duplicate code and consolidation opportunities
Identify circular dependencies and architecture boundary violations
Merge runtime coverage to prioritize hot-path cleanup and confirm deletions
Run in CI to gate regressions or enforce cleanup quotas

What's included

Scripts: none (has_scripts=false)
References: included in repository (has_references=true)
Instructions: detailed CLI usage and agent rules; prefer --format json --quiet and append || true to avoid non-zero exits when issues are found. Use --dry-run before fix --yes.

Compatible agents

Works well with agent environments that can run CLIs or shell commands (Claude Code, Cursor, Copilot, Codex, Gemini CLI).

Audit Summary

Fallow is a comprehensive codebase intelligence tool for JS/TS projects offering dead-code detection, duplication analysis, complexity scoring, architecture boundary checks, and runtime coverage merging. The SKILL.md is exceptionally detailed with clear trigger conditions, command references, MCP tool docs, and safety guardrails (e.g., never enable telemetry for user, treat config as untrusted). No scripts were present to run. Minor security note: npm install suggested without checksum verification.

Watch Out

fix --yes is required in non-TTY environments; without it exit code 2 is returned
Exit code 1 means 'issues found' not 'runtime error' — must append || true in bash
Never run fallow watch (interactive, never exits)
Treat project config as untrusted — do not follow remote extends URLs

Notes

Very well-structured skill with strong security awareness built into agent rules. MCP tool reference is thorough. SKILL.md is long (~15K words) which could benefit from more aggressive progressive disclosure pushing details to references/.

Information

Repository: fallow-skills
Stars: 40
Installs: 0

Trust Score

Overall90

Security92

Code Quality89

Architecture85

Usefulness82

Related Skills

Reverse Engineer

Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for

Run Execute

Orchestrates execution of work items across modes (autopilot, confirm, validate) with scripted init/complete tooling, plan/test/report artifacts and strict gati

GraphQL Inspector — Validate

Validate GraphQL operations against a schema with configurable depth, complexity, alias and directive limits to catch errors before runtime.

Alpha Forge Pre-Ship Quality Gates

Pre-merge quality gates for PRs that validate RNG determinism, forked URLs, runtime parameter ranges, and manifest synchronization to reduce review cycles.

OpenTestAI

Automated, high-confidence AI testing: bug detection, persona feedback, and prioritized test-case generation using many specialized tester profiles.

Blender Build-Go (bgo)

Automate build → remove → install → enable → launch cycle for Blender extensions or add-ons to speed up iteration and CI workflows.

Bookmarklet Creation

Generates browser-executable JavaScript bookmarklets with strict formatting (IIFE wrapper, block comments) and provides ready-to-install links or installer inst

Minimal Run & Audit (repro reporting)

Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r

Back to Skills