morluto/smokinggun
Help your agents find the smoking gun they're looking for
SmokingGun is optimization evidence for agents: it finds complexity hotspots and tests whether a proposed change is worth making. Its defining discipline is that it keeps static findings, estimates, imported measurements and behaviour evidence distinct, so an agent can decide what to investigate next rather than treating every number as equally solid. You run 'smokinggun scan .' to get a report — hotspots, supporting evidence, coverage, assumptions and the validation needed next — and can switch to Markdown or SARIF output for integration.
Install
npm install -g smokinggunThe README's CLI install is 'npm install -g smokinggun'; a one-off scan without a global install is 'npx --yes --package=smokinggun -- smokinggun scan .'. It also documents an optional agent skill installed with the shared Skills CLI: 'npx skills add https://github.com/morluto/smokinggun --skill smokinggun'. The npm package smokinggun 5.0.0 was re-verified live on 2026-10-02 with its repository field back-linking to morluto/smokinggun (MIT). The README notes SmokingGun requires Node 22.18 or later and that the npx command may contact the npm registry.
Compatibility
A CLI (plus an optional agent skill) requiring Node 22.18 or later. Scans a repository and can emit text, Markdown or SARIF ('--format sarif --output smokinggun.sarif'). The default 'runtime' profile suppresses findings from tests, documentation, examples and fixtures; '--source-profile all' scans everything. The README says the skill teaches compatible agent hosts how to use the CLI but that SmokingGun does not modify agent configuration itself.
Details
- Repo: morluto/smokinggun
- Category: Coding & Development
- Stars: 3
- Version: npm smokinggun 5.0.0 (registry re-verified 2026-10-02); MIT; Node >=22.18
- Last push: 2026-09-21
- First seen: 2026-08-05
FAQ
- How do I install SmokingGun?
- npm install -g smokinggun (Node 22.18+); a one-off scan is npx --yes --package=smokinggun -- smokinggun scan ..
- What makes it more than a linter?
- It keeps static findings, estimates, imported measurements and behaviour evidence distinct, and reports the validation needed next, so an agent can judge whether a change is worth making.
- Can it output SARIF?
- Yes — 'smokinggun scan . --format sarif --output smokinggun.sarif'.
Alternatives
sirilee/dsh-rewind · licat2023/dsh-session-tabs · mayf3/dsh-session-doctor