mcpbeat Sign in

Tech Stack Evaluator Skill for Claude

> Evaluate and compare technology stacks with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, calculating total cost of ownership, assessing migration paths, or analyzing ecosystem viability.

42k tokens
context cost
the whole folder, loaded on every use
17
files
ships runnable scripts
0
copies elsewhere
how many repositories repackaged it
447
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository
npx skills add https://github.com/borghei/Claude-Skills --skill tech-stack-evaluator

What comes with it

162 052 bytes besides the instruction
assets/expected_output_comparison.json
assets/sample_input_structured.json
assets/sample_input_tco.json
assets/sample_input_text.json
references/examples.md
references/metrics.md
references/tool-reference.md
references/usage-and-criteria.md
references/workflows.md
scripts/ecosystem_analyzer.py
scripts/format_detector.py
scripts/migration_analyzer.py
scripts/report_generator.py
scripts/security_assessor.py
scripts/stack_comparator.py
scripts/tco_calculator.py

The instruction itself

8 sections, as written by the author

Technology Stack Evaluator

Evaluate and compare technologies, frameworks, and cloud providers with data-driven, weighted analysis and actionable recommendations.

Core Capabilities

  • Technology comparison — weighted multi-criteria scoring of frameworks and libraries across 8 categories.
  • TCO analysis — 5-year total cost of ownership including hidden costs (technical debt, vendor lock-in, turnover).
  • Ecosystem health — viability scoring from GitHub, npm, community, and corporate-backing metrics.
  • Security assessment — vulnerability/patch scoring and compliance readiness for GDPR, SOC2, HIPAA, PCI-DSS.
  • Migration analysis — complexity, effort, risk, and recommended approach (direct/phased/strangler).
  • Cloud comparison — compare AWS, Azure, GCP for specific workloads.

When to Use

  • Comparing frontend/backend frameworks for new projects
  • Evaluating cloud providers for specific workloads
  • Planning technology migrations with risk assessment
  • Calculating build vs. buy decisions with TCO
  • Assessing open-source library viability

When NOT to use: trivial decisions between similar tools (use team preference), mandated technology choices (decision already made), emergency production issues (use monitoring tools).

Clarify First

Before the evaluation, confirm these inputs. If any is unknown or vague, ASK — do not assume:

  • [ ] Candidates — the specific frameworks / libraries / cloud providers to compare (the subject of the analysis)
  • [ ] Analysis type — comparison / TCO / ecosystem health / security / migration (selects which module runs)
  • [ ] Decision criteria & weights — which of the 8 categories matter most for this context (drives the weighted scoring and recommendation)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

Tools

All scripts are Python library modules — import the class and call its methods. See references/tool-reference.md for full parameters and outputs.

| Tool | Purpose | Entry point |

|------|---------|-------------|

| stack_comparator.py | Weighted comparison across 8 categories | from stack_comparator import StackComparator |

| tco_calculator.py | Multi-year TCO incl. hidden costs | from tco_calculator import TCOCalculator |

| ecosystem_analyzer.py | Ecosystem health & viability scoring | from ecosystem_analyzer import EcosystemAnalyzer |

| security_assessor.py | Security posture & compliance readiness | from security_assessor import SecurityAssessor |

| migration_analyzer.py | Migration complexity, effort, risks | from migration_analyzer import MigrationAnalyzer |

| report_generator.py | Context-aware report rendering | from report_generator import ReportGenerator |

| format_detector.py | Detect/parse JSON, YAML, URL, or text input | from format_detector import FormatDetector |

References

Load the reference that matches the task — keep this file lean and pull detail on demand:

  • references/tool-reference.md — full constructor parameters, methods, scoring weights, and output formats for all 7 scripts. Read when wiring up or debugging any tool.
  • references/usage-and-criteria.md — example prompts, input formats (text/YAML/JSON), analysis depth tiers, confidence levels, troubleshooting table, and success criteria. Read before invoking the evaluator.
  • references/metrics.md — detailed scoring algorithms and calculation formulas.
  • references/examples.md — input/output examples for all analysis types.
  • references/workflows.md — step-by-step evaluation workflows for common scenarios.

Scope & Limitations

Covers:

  • Weighted multi-criteria comparison of frameworks, libraries, and cloud providers
  • Multi-year TCO projections including hidden costs (technical debt, vendor lock-in, turnover)
  • Ecosystem viability assessment using GitHub, npm, and community metrics
  • Security posture scoring and compliance readiness for GDPR, SOC2, HIPAA, PCI-DSS

Does NOT cover:

  • Live data fetching from GitHub API, npm registry, or vulnerability databases (all data must be provided as input dictionaries)
  • Performance benchmarking or load testing (use engineering/senior-qa for test execution)
  • Licensing legal review or contract negotiation (use ra-qm-team compliance skills for regulatory guidance)
  • Team hiring or organizational design decisions (use hr-operations/talent-acquisition for staffing analysis)

Integration Points

| Skill | Integration | Data Flow |

|-------|-------------|-----------|

| engineering/senior-security | Feed security assessor output into deeper vulnerability analysis | SecurityAssessor results → security review input |

| engineering/senior-devops | Use TCO hosting projections to inform infrastructure planning | TCOCalculator hosting/scaling data → DevOps capacity models |

| engineering/senior-qa | Migration test coverage scores inform QA test planning | MigrationAnalyzer testing_requirements → QA test strategy |

| ra-qm-team/compliance-auditor | Compliance readiness gaps feed into formal audit preparation | SecurityAssessor.assess_compliance() missing features → audit checklist |

| c-level-advisor/cto-advisor | Executive summaries and TCO reports support CTO decision-making | ReportGenerator executive summary → strategic technology decisions |

| product-team/product-manager | Ecosystem viability and migration timelines inform product roadmaps | EcosystemAnalyzer + MigrationAnalyzer → roadmap planning |

Other skills for the same job

different authors, same section of the catalogue
Codebase Cleanup Deps Audit
by ComeOnOliver
×2

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

10k tokens
Security Best Practices
by openai
vendor ×1

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

103k tokens
Better Auth
by mrgoonie
×1

Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, session management, role-based access control (RBAC), rate limiting, and database adapters. Use when adding authentication to applications, implementing OAuth flows, setting up 2FA/MFA, managing user sessions, configuring authorization rules, or building secure authentication systems for web applications.

46k tokens scripts
Repomix
by mrgoonie
×1

Package entire code repositories into single AI-friendly files using Repomix. Capabilities include pack codebases with customizable include/exclude patterns, generate multiple output formats (XML, Markdown, plain text), preserve file structure and context, optimize for AI consumption with token counting, filter by file types and directories, add custom headers and summaries. Use when packaging codebases for AI analysis, creating repository snapshots for LLM context, analyzing third-party libraries, preparing for security audits, generating documentation context, or evaluating unfamiliar codebases.

27k tokens scripts
Dependency Management Deps Audit
by lingxling
×1

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

7k tokens
Hubspot Integration
by lingxling
×1

Expert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers Node.js and Python SDKs.

5k tokens
Security Best Practices
by christophacham
×1

Perform language and framework specific security best-practice reviews and suggest improvements. Use when the user explicitly requests security best practices guidance, a security review or report, or secure-by-default coding help. Supports Python, JavaScript/TypeScript, and Go. Do NOT use for general code review, debugging, threat modeling (use security-threat-model), or non-security tasks.

102k tokens
API Gateway Configuration
by ComeOnOliver
×1

Configures API gateways for routing, authentication, rate limiting, and request transformation in microservice architectures. Use when setting up Kong, Nginx, AWS API Gateway, or Traefik for centralized API management.

525 tokens

How to use it

Copy the folder

Take borghei/tech-stack-evaluator from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.