Techstack Decision MatrixSAFE
Overview
An agent skill published by revfactory.
459e1bb8f76eOBSERVED · 2026-10-12What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: techstack-decision-matrix description: "companyproject tech stack systematicas comparison· decision-making matrix. 'techstack-analyst' agent tech stack comparisonand recommendationto do when this skill's assessment standard, cost total, pattern must be utilized. 'tech stack comparison', 'person cost total', ' ' etc. However, market analysis MVP design is outside this skill's scope." --- # TechStack Decision Matrix — tech stack decision-making matrix companyproject optimizationdone tech stack comparison, cost calculation, recommendation . ## assessment standard framework (5) ``` 1. learning (Learning Curve): time 2. development within also (Development Speed): MVPto time 3. operations cost (Operating Cost): month person cost 4. extensionnature (Scalability): user increase when response nature 5. total (Ecosystem): library, , hiring market ``` ## comparison | framework | learning | within also | total | quality | notes | |-----------|------|------|--------|------|------| | Next.js | 3/5 | 5/5 | 5/5 | web, SaaS | SSR+API integration | | React (Vite) | 3/5 | 4/5 | 5/5 | SPA, dashboard | annualnature | | Vue.js | 4/5 | 4/5 | 4/5 | during project | learning | | Svelte | 4/5 | 4/5 | 3/5 | nature duringwhen | size minimum | | Astro | 4/5 | 5/5 | 3/5 | content/blog | quality company | | Flutter Web | 3/5 | 3/5 | 3/5 | platform | day | ## comparison | framework | learning | within also | nature | quality | notes | |-----------|------|------|------|------|------| | Next.js API | 4/5 | 5/5 | 3/5 | Full, BFF | integration | | FastAPI (Python) | 4/5 | 4/5 | 4/5 | API, AI/ML | type | | Express (Node) | 4/5 | 4/5 | 3/5 | API | annualnature | | Django | 3/5 | 4/5 | 4/5 | managementspecialist needed when | included | | Spring Boot | 2/5 | 3/5 | 5/5 | versusscale whensystem | investment week | | Go (Fiber) | 3/5 | 3/5 | 5/5 | nature API | whennature strength | ## data comparison | DB | type | free | quality | notes | |----|------|----------|------|------| | Supabase (PostgreSQL) | SQL | 500MB, 50K MAU | CRUD , authentication included | Firebase versusplan | | PlanetScale (MySQL) | SQL | 1GB, 1B reads | extensionnature needed when | feature | | Firebase Firestore | NoSQL | 1GB, 50K reads/day | actualtime, day | total | | MongoDB Atlas | NoSQL | 512MB | annualKorean | JSON | | Turso (SQLite) | SQL | 9GB, 500 DB | degree, whenwork | from | | Neon (PostgreSQL) | SQL | 3GB | Next.js | from PG | ## person·deployment cost comparison ### free utilization ``` $0/month : : Vercel Free (100GB versus) DB: Supabase Free (500MB) authentication: Supabase Auth (50K MAU) storydegree: Supabase Storage (1GB) person: fromperson (*.vercel.app) email: Resend Free (100/day) quality: MVP verify, initial user 100people or less ``` ### cost ($10-30/month) ``` : Vercel Pro ($20/month) or Railway ($5~) DB: Supabase Pro ($25/month) or PlanetScale Scaler ($29/month) person: annual $12-15 email: Resend ($20/month) monitoring: Sentry Free total: $25-50/month (approx. 3-70,000 KRW) quality: user 100-1,000people ``` ### ROI total ``` minutebasispoint = month operations / (ARPU × beforeexchange × MAU) examplewhen: month operations: 50,000 KRW : 9,900KRW/month beforeexchange: 3% needed MAU: 5 only / (9,900 × 0.03) = 168people 168people nature user needed ``` ## recommendation ### web SaaS (1person developmentspecialist) ``` ✅ recommendation: Next.js + Supabase + Vercel + Tailwind CSS - Full integration - free whenwork → day - authentication·DB·storydegree personKRW - learning report, nature ``` ### day ``` ✅ recommendation: Flutter + Firebase + Google Play/App Store - iOS + Android when - actualtime DB, when within - free whenwork → day versusplan: React Native + Expo + Supabase ``` ### AI/ML ``` ✅ recommendation: Next.js + FastAPI + OpenAI API + Vercel + Railway - : Next.js (Vercel) - AI : FastAPI (Railway) - LLM: OpenAI/Anthropic API - DB: Supabase ( search pgvector) ``` ### content/blog ``` ✅ recommendation: Astro + Markdown + Vercel + free CMS - when quality creation (, cost) - SEO optimization within - $0/month operations possible ``` ## decision-making matrix capability ```markdown ## tech stack comparison matrix | standard (duringvalue) | option A | option B | option C | |-------------|--------|--------|--------| | learning (20%) | 4/5 | 3/5 | 5/5 | | developmentwithin also (30%) | 5/5 | 4/5 | 3/5 | | operationscost (20%) | 5/5 | 3/5 | 4/5 | | extensionnature (15%) | 4/5 | 5/5 | 3/5 | | total (15%) | 5/5 | 5/5 | 3/5 | | **during total** | **4.6** | **3.9** | **3.7** | | **recommendation** | ✅ 1 | 2 | 3 | ``` ## reference - 2024-2025 market standard, price·free possible - detailed guide: `references/techstack-details.md` reference
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
459e1bb8f76efull audit observations/trust-audit/skill/revfactory__techstack-decision-matrix.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 459e1bb8f76e | SAFE | B | 89 | first audit |
Questions
Is Techstack Decision Matrix safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Techstack Decision Matrix access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (459e1bb8f76e), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.