Fähigkeiten explain-codebase
📦

explain-codebase

v1.0 Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle

Explain an Unfamiliar Codebase

Unfamiliar repositories make it difficult to find entry points, setup steps, and important dependencies. This skill guides a file-referenced onboarding map with one traced flow and clear open questions.

Unterstützt: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 70 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "explain-codebase" from https://skillstore.io/skills/agentkitco-explain-codebase.md and its manifest at https://skillstore.io/api/skills/agentkitco-explain-codebase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/agentkitco-explain-codebase.md Signiertes manifest GET /api/skills/agentkitco-explain-codebase/manifest Signiertes lockfile GET /api/skills/agentkitco-explain-codebase/lockfile

Testen

„explain-codebase“ wird verwendet. Show the expected outline for a repository onboarding summary.

Erwartetes Ergebnis:

  • Purpose: project problem and intended users.
  • How to run: discovered commands and verification status.
  • Map: directories and their responsibilities.
  • Reading order: three inspected files with reasons.
  • Open questions: details not established from available evidence.

„explain-codebase“ wird verwendet. What should a central-flow explanation include?

Erwartetes Ergebnis:

  • Entry: the inspected request handler, command, or event consumer.
  • Processing: relevant functions in execution order, with file references.
  • Data boundary: storage or external service calls found in the inspected code.
  • Result: the response or output, with any unverified behavior identified.

Sicherheitsaudit

Mittleres Risiko
v2 • 22.10.2026 Versionsbericht öffnen

Eight findings are false positives involving Markdown formatting, read-only history inspection, citation rules, or explicit secret protections. One finding is confirmed because the skill directs execution of unfamiliar repository tests and lint commands without requiring review or isolation. No evidence found of data exfiltration, destructive intent, or prompt injection.

1
Gescannte Dateien
46
Analysierte Zeilen
0
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel
SKILL.md:17
System reconnaissance
2. **Run it**: install, run, test commands from manifests, Makefile and CI config. Run the cheap one
The instruction runs repository-defined tests and lint commands without requiring prior review or isolation. These commands can execute arbitrary code from an unfamiliar repository.

Risikofaktoren

⚙️ Externe Befehle (6)
SKILL.md:18 SKILL.md:19 SKILL.md:23 SKILL.md:27-38 SKILL.md:38-42 SKILL.md:42

Erkannte Muster

System reconnaissance
Geprüft von: codex Audit-Verlauf anzeigen →
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/agentkitco-explain-codebase/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-explain-codebase/security.svg)](https://skillstore.io/skills/agentkitco-explain-codebase?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/agentkitco-explain-codebase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-explain-codebase/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/agentkitco-explain-codebase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

agentkitco. (2026). explain-codebase security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-explain-codebase/audits/2

BibTeX-Zitat

@techreport{agentkitco-agentkitco-explain-codebase-2026, author = {agentkitco}, title = {explain-codebase security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/agentkitco-explain-codebase/audits/2}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "explain-codebase security audit report (audit version 2)" version: "1.0" type: report authors: - name: "agentkitco" date-released: "2026-10-22" url: "https://skillstore.io/skills/agentkitco-explain-codebase/audits/2" identifiers: - type: other value: "skillstore:agentkitco-explain-codebase:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
55
Architektur
85
Wartbarkeit
87
Inhalt
65
Gemeinschaft
91
Spezifikationskonformität

Was Sie erstellen können

Orient a New Developer

Find setup steps, entry points, and three useful files to read before starting a first contribution.

Prepare a Technical Handoff

Summarize module responsibilities, external dependencies, and unresolved questions for a team taking ownership.

Plan an Integration Investigation

Trace a central request through application layers and identify configuration names and service boundaries relevant to an integration.

Diese Prompts ausprobieren

Beginner: Get Oriented 
Explain this repository in one page. Cover its purpose, directory map, entry points, and three files to read first. Cite files you inspect.
Intermediate: Understand Setup 
Map setup, run, and test commands from project files. List environment variable names only. Do not execute commands; mark them unverified.
Advanced: Trace a Central Flow 
Trace [request, command, or event] from entry to storage or output. List files and functions in order, cite evidence, and label inferences.
Advanced: Prepare an Ownership Map 
Create an onboarding map of [repository]. Include one central flow, external services, quality signals, recent churn, and open questions. Review commands before requesting execution approval.

Bewährte Praktiken

  • Specify the repository and one central workflow to keep the map focused.
  • Review repository commands and hooks before approving execution in an isolated environment.
  • Require file references, verification status, and explicit labels for inferred behavior.

Vermeiden

  • Running unfamiliar installation, test, or lint commands without review or isolation.
  • Including secret values when configuration variable names are sufficient.
  • Treating a concise onboarding map as exhaustive documentation or a completed security audit.

Häufig gestellte Fragen

What does this skill produce?
A concise onboarding map covering purpose, setup, structure, one central flow, dependencies, reading priorities, and open questions.
Which AI tools are listed as supported?
The marketplace metadata lists Claude, Codex, and Claude Code. Repository access and command permissions depend on the host environment.
Does it execute project commands?
The instructions call for running inexpensive tests and lint checks. Review commands first and isolate execution when the repository is untrusted.
How does it handle environment secrets?
It explicitly prohibits printing secret values from environment files or configuration. Reports should list variable names only.
Will it explain every file?
No. It prioritizes a two-level directory map, key entry points, and one central flow instead of an exhaustive file tour.
How does it handle missing evidence?
Claims must cite inspected files. Inferences receive labels, unexecuted commands remain unverified, and unresolved details become open questions.

Entwicklerdetails

Lizenz

MIT

Autorenversion

v1.0

Skillstore-Revision

r1

Versionshinweis

Die vom Autor angegebene Version ist kein gültiges SemVer.

Repository

https://github.com/agentkitco/agentkit-dev-skills/tree/a5058856442fcb89bd538b1c01f94558488bfac3/skills/explain-codebase

Ref.

18efac79a818d7e997295839638fdd21906cfd1c

Aktualität der Wartung

22.10.2026

Nutzung

5 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md