Create and run composable background analysis workers for security scanning, pattern learning, and docs.
Install
mkdir -p .claude/skills/custom-workers && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/5137" && unzip -o skill.zip -d .claude/skills/custom-workers && rm skill.zipInstalls to .claude/skills/custom-workers
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Create and run custom background analysis workers with composable phases. Use when you need automated code analysis, security scanning, pattern learning, or API documentation generation.Key capabilities
- →Execute automated code analysis phases
- →Run security and secret detection scans
- →Generate API documentation
- →Train pattern learning models
- →Configure custom worker pipelines via YAML
How it works
The tool runs composable phase executors defined in a YAML configuration to process code through various analysis, learning, and reporting stages.
Inputs & outputs
When to use custom-workers
- →Run automated security scans on source code
- →Generate API documentation automatically
- →Perform pattern learning on codebase
- →Analyze test coverage
About this skill
Custom Workers
Build composable background analysis workers with 24 phase executors and 6 presets.
Quick Start
# List available presets
npx ruvector workers presets
# List available phase executors
npx ruvector workers phases
# Create a custom worker from preset
npx ruvector workers create my-scanner --preset security-scan
# Run the worker
npx ruvector workers run my-scanner --path ./src
Available Presets
| Preset | Description | Phases |
|---|---|---|
quick-scan | Fast file discovery and stats | file-discovery → summarization |
deep-analysis | Comprehensive code analysis | file-discovery → static-analysis → complexity-analysis → import-analysis → pattern-extraction → graph-build → vectorization → summarization |
security-scan | Security-focused analysis | file-discovery → security-analysis → secret-detection → dependency-discovery → report-generation |
learning | Pattern learning and memory | file-discovery → pattern-extraction → embedding-generation → pattern-storage → sona-training |
api-docs | API endpoint documentation | file-discovery → api-discovery → type-analysis → report-generation |
test-analysis | Test coverage analysis | file-discovery → static-analysis → pattern-extraction → summarization |
Phase Executors (24 total)
Discovery Phases
file-discovery- Find files matching patternspattern-discovery- Discover code patternsdependency-discovery- Map dependenciesapi-discovery- Find API endpoints
Analysis Phases
static-analysis- AST-based code analysiscomplexity-analysis- Cyclomatic complexitysecurity-analysis- Security vulnerability scanperformance-analysis- Performance bottlenecksimport-analysis- Import/export mappingtype-analysis- TypeScript type extraction
Pattern Phases
pattern-extraction- Extract code patternstodo-extraction- Find TODOs/FIXMEssecret-detection- Detect hardcoded secretscode-smell-detection- Identify code smells
Build Phases
graph-build- Build code graphcall-graph- Function call graphdependency-graph- Dependency graph
Learning Phases
vectorization- Convert to vectorsembedding-generation- ONNX embeddings (384d)pattern-storage- Store in VectorDBsona-training- SONA reinforcement learning
Output Phases
summarization- Generate summaryreport-generation- Create reportindexing- Index for search
YAML Configuration
Create workers.yaml in your project:
version: '1.0'
workers:
- name: auth-scanner
triggers: [auth-scan, scan-auth]
phases:
- type: file-discovery
config:
patterns: ["**/auth/**", "**/login/**"]
- type: security-analysis
- type: secret-detection
- type: report-generation
capabilities:
onnxEmbeddings: true
vectorDb: true
- name: api-documenter
triggers: [api-docs, document-api]
phases:
- type: file-discovery
config:
patterns: ["**/routes/**", "**/api/**"]
- type: api-discovery
- type: type-analysis
- type: report-generation
Load configuration:
npx ruvector workers load-config --file workers.yaml
CLI Commands
# Core commands
npx ruvector workers presets # List presets
npx ruvector workers phases # List phases
npx ruvector workers create <name> --preset <preset>
npx ruvector workers run <name> --path <path>
# Configuration
npx ruvector workers init-config # Generate workers.yaml
npx ruvector workers load-config # Load from workers.yaml
npx ruvector workers custom # List registered workers
# Monitoring
npx ruvector workers status # Worker status
npx ruvector workers results # Analysis results
npx ruvector workers stats # Statistics
MCP Tools
Available via ruvector MCP server:
| Tool | Description |
|---|---|
workers_presets | List available presets |
workers_phases | List phase executors |
workers_create | Create custom worker |
workers_run | Run worker on path |
workers_custom | List custom workers |
workers_init_config | Generate config |
workers_load_config | Load config |
Capabilities
Workers can use these capabilities:
- ONNX Embeddings: Real transformer embeddings (all-MiniLM-L6-v2, 384d, SIMD)
- VectorDB: Store and search embeddings with HNSW indexing
- SONA Learning: Self-Organizing Neural Architecture for pattern learning
- ReasoningBank: Trajectory tracking and meta-learning
Integration with Hooks
Workers auto-dispatch on UserPromptSubmit via trigger keywords:
- Type "audit this code" → triggers audit worker
- Type "security scan" → triggers security worker
- Type "learn patterns" → triggers learning worker
Example: Security Scanner
# Create from security-scan preset
npx ruvector workers create security-checker --preset security-scan --triggers "security,vuln,cve"
# Run on source
npx ruvector workers run security-checker --path ./src
# View results
npx ruvector workers results
Example: Custom Learning Worker
# workers.yaml
workers:
- name: code-learner
triggers: [learn, pattern-learn]
phases:
- type: file-discovery
config:
patterns: ["**/*.ts", "**/*.js"]
exclude: ["node_modules/**"]
- type: static-analysis
- type: pattern-extraction
- type: embedding-generation
- type: pattern-storage
- type: sona-training
capabilities:
onnxEmbeddings: true
vectorDb: true
sonaLearning: true
When not to use it
- →When performing real-time interactive code editing
Prerequisites
Limitations
- →Requires Node.js for CLI execution
- →Performance depends on the number of phases and codebase size
How it compares
It enables modular, multi-phase background analysis rather than relying on single-purpose scripts or manual execution.
Compared to similar skills
custom-workers side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| custom-workers (this skill) | 1 | 7mo | Review | Intermediate |
| clay-policy-guardrails | 1 | 26d | Review | Intermediate |
| semaphore-third-party-licenses | 0 | 2mo | Review | Intermediate |
| audit-env-variables | 0 | 5mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by ruvnet
View all by ruvnet →You might also like
clay-policy-guardrails
jeremylongshore
Implement Clay lint rules, policy enforcement, and automated guardrails. Use when setting up code quality rules for Clay integrations, implementing pre-commit hooks, or configuring CI policy checks for Clay best practices. Trigger with phrases like "clay policy", "clay lint", "clay guardrails", "clay best practices check", "clay eslint".
semaphore-third-party-licenses
semaphoreui
>
audit-env-variables
qdhenry
Analyze environment variables in JavaScript/TypeScript projects. Identifies unused variables, infers permission scopes, detects specific services (Stripe, AWS, Supabase), and documents code paths. Includes optional cleanup of unused variables with regression detection. Use when auditing .env files,
file-organizer-dev
kridaydave
Development guide for the File Organizer MCP server codebase. Use when (1) adding new MCP tools, (2) adding new services, (3) modifying existing tools or services, (4) writing tests, (5) fixing security issues, (6) refactoring code, or (7) understanding the architecture. Provides patterns for Zod sc
fix-dependabot-alerts
microsoft
Fix Dependabot security alerts by updating vulnerable npm dependencies. Use when the user mentions "dependabot", "security alerts", "vulnerability", "CVE", or wants to update packages with security issues.
update-api-docs
Agenta-AI
Update the API reference documentation by downloading the latest OpenAPI spec from production and regenerating the Docusaurus API docs