Tools

All tools below run entirely locally. No network calls, no key required.

Quality scanners

10 local scanners for tech debt, security, complexity, and AI-pattern detection.

Tool	What it does
`scan_health`	Unified health report across all quality dimensions
`scan_debt`	Detect TODOs, bare exceptions, missing types, long functions
`scan_code_quality`	AST-based rule enforcement (bare except, type hints, logging)
`detect_ai_patterns`	Find AI-generated code smells and test anti-patterns
`validate_compliance`	Check code against nablr quality standards
`scan_external_dependencies`	Find env vars, API clients, external URLs
`scan_docs`	Detect missing or stale documentation
`scan_dead_code`	Find unused functions, classes, and imports
`scan_complexity`	Cyclomatic + cognitive complexity per function
`scan_security`	Hardcoded secrets, injection risks, insecure patterns

Auto-document structure, dependencies, and staleness across the repo.

Tool	What it does
`generate_codemap`	Auto-document directory structure to `CODE_MAP.md`
`check_codemap_freshness`	Detect stale CODE_MAP vs current file tree
`generate_dependency_graph`	Visualize module dependencies

Track a story through the SDLC and catch broken handoffs early.

Tool	What it does
`init_workflow`	Start tracking a story through the SDLC
`get_workflow_state`	Current phase, blockers, pending artifacts
`suggest_next_agent`	Auto-suggest agent transitions based on state
`generate_story_dependency_graph`	Visualize story dependencies
`detect_flow_gaps`	Find broken end-to-end flows

Trial activation, key management, and plan status.

Tool	What it does
`start_trial`	Mint a 14-day Pro trial key (no credit card)
`activate_key`	Activate a paid Pro key
`check_license`	Show current plan and key status

Tools are available automatically once nablr is connected. Invoke them naturally:

Scan this directory for technical debt

Generate a codemap for src/

What's the current workflow state for STORY-042?