Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
DeepSeek
Muse+22 moreClaude CodeCursorCodex CLIDeepSeekMuse
Dots
Manus
Grok
Grok Bot+18 agentsJS CacheLayer — Static AST Redis Resilience Auditor
Catches the five Redis mistakes that leak memory, collide keys, and drop your database on hot-key expiration.
$5
JS CacheLayer — Static AST Redis Resilience Auditor
Example session with this skill installed
// Combined input sample showing structural dependency and blocking anomalies
const express = require('express');
const redis = require('redis');
const router = express.Router();
const client = redis.createClient();
router.get('/user/:id', async (req, res) => {
const key = 'user' + req.params.id;
const cached = await client.get(key);
if (cached) return res.json(JSON.parse(cached));
const user = await db.users.findOne({ id: req.params.id });
await client.set(key, JSON.stringify(user));
res.json(user);
});
function getCachedUser(id) {
const key = `user:${id}`;
return client.get(key).then((cached) => {
if (cached) return JSON.parse(cached);
return db.users.findOne({ id });
});
}
module.exports = router;
- Read your context and instructions
- Compiled the js cachelayer
{
"audit_status": "CRITICAL",
"findings": [
{
"id": "f1",
"file": "live/scan1.js",
"line": 12,
"severity": "HIGH",
"signature": "NO_TTL",
"message": "client.set called without a TTL",
"snippet": "await client.set(key, JSON.stringify(user))"
},
{
"id": "f2",
"file": "live/scan1.js",
"line": 8,
"severity": "HIGH",
"signature": "COLLIDING_KEYS",
"message": "key template 'user' + id has no separator",
"snippet": "const key = 'user' + req.params.id"
},
{
"id": "f3",
"file": "live/scan1.js",
"line": 12,
"severity": "HIGH",
"signature": "NO_INVALIDATION",
"message": "file writes to Redis but never invalidates the key namespace",
"snippet": "await client.set(key, JSON.stringify(user))"
},
{
"id": "f4",
"file": "live/scan2.js",
"line": 9,
"severity": "HIGH",
"signature": "THUNDERING_HERD_RISK",
"message": "cache miss leads directly to a database query without a lock or jitter",
"snippet": "return db.users.findOne({ id })"
},
{
"id": "f5",
"file": "live/scan2.js",
"line": 7,
"severity": "MEDIUM",
"signature": "BLOCKING_REDIS_CALL",
"message": "Redis call chained with .then inside a synchronous function",
"snippet": "return client.get(key).then((cached) => {"
}
],
"metadata": {
"version": "1.0.0",
"timestamp": "2026-10-15T12:00:00Z",
"files_scanned": 2,
"calls_found": 3
}
}
Connects securely to your tools. The creator never sees your data.
About this skill
Stop debugging silent memory leaks, unhandled client crashes, and unexpected event loop freezes. JS CacheLayer is a static AST-driven architectural engine that analyzes active Node.js codebases to detect fatal Redis integration defects before they threaten production stability.
Implementing a cache layer involves strict state serialization boundaries. Unless key layouts and cache-miss paths are managed deterministically, your primary database risks thread pool starvation on high-traffic runtimes. CacheLayer maps out integration liabilities in real-time.
What it does
- Automated Anti-Pattern Audit: Deep-scans Node.js modules to instantly isolate missing TTL bounds, key collisions, and invalidation failures.
- Deterministic AST Signatures: Evaluates JavaScript and TypeScript code structures against five rigid compliance rules, discarding heuristic guessing game loops.
- Production-Risk Mapping: Quantifies runtime vulnerabilities, capturing critical threats like asynchronous connection drop crashes or Node event loop starvation.
- Machine-Readable Telemetry: Outputs a strict, schema-validated JSON report optimized for IDE buffers, local git hooks, or CI/CD pipelines.
Detected Structural Vulnerabilities
- NO_TTL: Invoking client.set commands without explicit TTL expirations, creating expanding memory leaks that degrade performance.
- COLLIDING_KEYS: String concatenation sequences on key templates without functional schema separators, causing catastrophic cross-entity data contamination.
- NO_INVALIDATION: Active file write sequences that mutate database parameters without implementing structured invalidation triggers over the target key namespace.
- THUNDERING_HERD_RISK: Unprotected cache-miss logic routing massive concurrent traffic spikes directly to core databases without a distributed lock.
- BLOCKING_REDIS_CALL: Chaining asynchronous Redis calls via .then methods inside native synchronous function scopes, freezing execution streams.
When to use
- Standardizing data lifecycle and validation behaviors across Express, Fastify, or NestJS codebases.
- Prior to onboarding automated coding agents for extensive infrastructure refactoring tasks.
- Optimizing highly concurrent Node.js microservices to prevent database connection starvation.
When NOT to use
- Initiating active file-writing routines or repository modification sequences (this engine functions strictly in a passive, read-only mode).
- Auditing lightweight frontend assets or simple automation scripts under 300 total lines of code.
- Extracting raw server architecture configurations like Redis clustering, persistence intervals, or cluster setups.
Under the Hood & Security
- 100% Local & Air-Gapped: Functions entirely inside a read-only buffer structure (file_system_write: false). Zero external cloud dependencies ensure proprietary system prompts and internal source code never leak.
- Contract-Tested Stability: Backed by a rigorous 12-point testing harness verifying schema validation, boundary conditions, and absolute zero-hallucination execution.
Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Code Quality & Review.
Static analysis limits only. Operates without establishing external Redis connections or mutating local workspace files. Heuristic boundary tracking evaluates literal string configurations and explicit template structures, bypassing dependencies resolved dynamically via variables or functional factory layers. Runtime infrastructure diagnostic tracking (INFO, SLOWLOG) is omitted. Scans are automatically bypassed on micro-scripts under 300 total lines of code.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before buying a skill.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 22 days ago
- Software
Node.jsRedis
Permissions
File Scopes
Read-only sandbox access safely scans Node.js application files to classify data volatility and map validation boundaries. Zero filesystem writes — this advisory skill delivers strict caching architecture parameters directly into the agent context completely offline.