analyze_single_file – Deep Code Analysis

Comprehensive code quality assessment with security vulnerability detection and performance analysis

Perfect For

Legacy Codebase Analysis
Understand inherited code structure, identify technical debt, and assess refactoring requirements before development begins.

Pre-Deployment Code Reviews
Automated quality assessment covering code structure, security vulnerabilities, and performance bottlenecks.

Security Vulnerability Assessment
OWASP-compliant security analysis with risk categorisation and specific remediation guidance.

Performance Bottleneck Identification
Algorithm efficiency analysis, memory usage patterns, and optimisation recommendations with impact estimates.

Framework-Specific Analysis
Specialised analysis for React, Vue, Node.js, WordPress, and other frameworks with best practice recommendations.

Quick Start

local-llm:analyze_single_file with:
- filePath: "C:/project/src/UserService.ts"
- analysisDepth: "comprehensive"
- context: {"framework": "Node.js", "typescript": true}

Code snippet analysis:

local-llm:analyze_single_file with:
- code: "function processData(users) { return users.map(u => ({ ...u, processed: true })); }"
- context: {"performance": true, "framework": "React"}

Analysis Output

Code Quality Metrics

• Complexity Score: Cyclomatic complexity analysis with maintainability ratings
• Technical Debt Assessment: Code smell detection and refactoring priority recommendations
• Architecture Pattern Analysis: Design pattern usage and architectural improvement suggestions

Security Analysis

• OWASP Top 10 Compliance: Automated detection of injection flaws, authentication issues, and data exposure risks
• Input Validation Assessment: XSS, CSRF, and injection vulnerability identification
• Risk Categorisation: High/Medium/Low severity with CVE references where applicable

Performance Analysis

• Algorithm Efficiency: Big O notation analysis with optimisation recommendations
• Memory Usage Patterns: Memory leak detection and garbage collection optimisation
• Database Query Optimisation: N+1 query detection and indexing recommendations

Analysis Example

Input Code

function getUserData(id) {
    var user = db.query("SELECT * FROM users WHERE id = " + id);
    if (user) {
        return user;
    }
    return null;
}

Analysis Results

• Critical Security Issue: SQL injection vulnerability (CWE-89) – High Risk
• Performance Issue: Synchronous database operation blocking event loop
• Code Quality: Missing error handling, no input validation, var usage instead of const/let
• Recommended Fix: Implement parameterised queries, async/await pattern, and proper error handling

Parameters

Analysis Depth Configuration

• basic: Core quality metrics and critical security issues (2-3 minutes)
• detailed: Comprehensive analysis with performance recommendations (5-7 minutes)
• comprehensive: Full security audit, architecture analysis, and optimisation strategy (10+ minutes)

Advanced Configuration

Framework-Specific Analysis: Include framework context for specialised analysis patterns and best practice recommendations.

// React component analysis
context: {"framework": "React", "typescript": true, "hooks": true}

// Node.js API security focus
context: {"framework": "Node.js", "security": true, "async": true}

// WordPress plugin analysis
context: {"framework": "WordPress", "version": "6.4", "security": true}

Analysis Workflow Integration:

1. Run analyze_single_file for baseline assessment
2. Use suggest_refactoring for improvement recommendations
3. Generate unit tests with generate_unit_tests
4. Document changes with generate_documentation

Related Functions

• suggest_refactoring – Code improvement recommendations with implementation examples
• security_audit – Multi-file security analysis with OWASP compliance reporting
• generate_unit_tests – Automated test suite generation with framework-specific patterns
• convert_to_typescript – JavaScript to TypeScript migration with type annotations