Skip to content

Latest commit

 

History

1 Commit

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 

Repository files navigation

Overlay

Understand what your AI just built — before you ship it.

A Claude Code skill that reads your codebase and generates a plain-language report of what every part does — with flags for anything that touches user data, automated decisions, or regulatory boundaries.

Who is this for?

Vibe coders — people who build software by instructing AI (Claude Code, Cursor, Copilot, Lovable, Bolt). You described what you wanted. The AI wrote the code. It works.

But do you know what it actually does?

  • Does it store user passwords securely?
  • Is it sending data to third-party APIs you didn't ask for?
  • Does it make automated decisions about users with no override?
  • Would it comply with the EU AI Act or GDPR?

Overlay tells you — in plain language, with zero jargon.

What it produces

A single, self-contained HTML report with:

  1. What You Built — Plain-language summary of what your app does
  2. How It Works — Visual architecture map of all the pieces
  3. What the Code Does — Module-by-module walkthrough with code ↔ English translations
  4. Risk Flags — Clear alerts for user data, automated decisions, and regulatory boundaries
  5. Before You Ship — Specific action items for your codebase

The report takes 5-15 minutes to read. It's awareness, not an audit.

Install

Copy the overlay folder into your Claude Code skills directory:

cp -r overlay ~/.claude/skills/

Usage

# Point it at your project
overlay ./my-project

# Or a GitHub repo
overlay https://github.com/user/repo

# Or the current directory
overlay this

Risk Categories

Level Meaning Examples
🔴 HIGH Stop and think before shipping Automated decisions about people, sensitive data without consent, AI making consequential choices with no human override
🟡 MEDIUM Worth understanding User data storage, authentication, external API calls, AI processing user data, cookies/tracking
🟢 LOW Good to know Static content, client-side logic, dependency inventory

Regulatory Awareness

Overlay checks code patterns against:

  • EU AI Act — Articles 4, 5, 6, 10, 13, 14, 50, 86a
  • GDPR — Articles 5, 6, 7, 9, 13, 22, 25
  • ePrivacy — Cookie consent, tracking

⚠️ This is a code awareness tool, not legal advice. Overlay helps you understand where your code intersects with regulatory concepts. For legal compliance, consult a qualified professional.

Structure

overlay/
├── SKILL.md              # Main skill instructions
├── README.md             # This file
└── references/
    ├── design-system.md  # Visual styling for the HTML report
    └── regulations.md    # Key regulatory articles & code patterns

Why this exists

Millions of people are building software with AI coding tools. They're shipping products that collect data, make decisions, and affect real users — often without understanding what the code does.

That's not a skill gap. It's a visibility gap.

Overlay makes the invisible visible.

Built by

Shay Zhou — Product Designer & Builder, Amsterdam

License

MIT

About

No description, website, or topics provided.

Resources

Stars

1 star

Watchers

1 watching

Forks

Releases

Packages

Contributors