Skip to content
Back to skills

Kantra Analyze

ASecurity

Utilize Kantra, a CLI that unifies analysis and transformation capabilities of Konveyor, to analyze the source code of an application for violations.

  • 666 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added February 9, 2026
toolsbash

Works with

  • cli

Security analysis

A100/100

Scanned February 12, 2026

npx -y skills add majiayu000/claude-skill-registry --skill kantra-analyze --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Kantra Analyze?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Kantra Analyze
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/majiayu000-kantra-analyze/badge)](https://www.skillsdirectory.com/skills/majiayu000-kantra-analyze)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: kantra-analyze
description: Utilize Kantra, a CLI that unifies analysis and transformation capabilities of Konveyor, to analyze the source code of an application for violations.
allowed-tools: Bash(kantra:*), Bash(yq:*)
---

Utilize the command `/kantra-analyze` to perform analysis on application source code for violations using Kantra. Be sure to ask the user what directory to analyze, as well as suggest target technologies.

IMPORTANT: If the user makes changes to what you suggest, be sure to confirm the final results before continuing.

Then, filter the `output.yaml` (using the schema in `reference.md`) using the scripts provided to extract all the violations found.

IMPORTANT: If making a decision about the input directory, be sure to scope the input directory to only the relevant application code to avoid unnecessary processing of unrelated files.

## Kantra Analyze Command

To show help for the Kantra analyze command, run:

```sh
kantra analyze --help
```


To run analysis on application source code, run:

```sh
kantra analyze --input=<path/to/source/code> --output=<path/to/output/report> --skip-static-report
```

If the output directory already exists, Kantra will fail. To overwrite the directory, supply the `--overwrite` flag.

> [!IMPORTANT]
> `--skip-static-report` is used to avoid generating a static HTML report, which may not be needed in all contexts.


To list all sources and targets, use:

```sh
kantra analyze --list-sources
kantra analyze --list-targets
```

Add targets to the analyze command using multiple `--target=<target>` flags.

> [!IMPORTANT]
> Try to limit the sources and targets to only those relevant to your application to avoid unnecessary processing of unrelated rules.


To list all providers, use:

```sh
kantra analyze --list-providers
```

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.