Fähigkeiten untangle-codebase
📦

untangle-codebase

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle

Untangle Codebase Dependencies and Refactoring Decisions

Scattered logic and hidden dependencies make routine changes harder to review and verify. This skill guides agents through structural analysis, grouped redesign decisions, and behavior checks.

Unterstützt: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 64 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "untangle-codebase" from https://skillstore.io/skills/caldoai-untangle-codebase.md and its manifest at https://skillstore.io/api/skills/caldoai-untangle-codebase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Testen

„untangle-codebase“ wird verwendet. Review duplicated action availability checks across a toolbar, menu, and command palette.

Erwartetes Ergebnis:

  • Problem: three interfaces maintain separate action lists and availability rules.
  • Proposed fix: define shared action metadata and behavior consumed by all three interfaces.
  • Verification: confirm each interface exposes the same actions and preserves existing availability behavior.

„untangle-codebase“ wird verwendet. Review dialog focus handling that relies on delays and global flags.

Erwartetes Ergebnis:

  • Problem: focus restoration depends on timing and coordination between dialogs.
  • Proposed fix: centralize focus restoration in the shared dialog lifecycle.
  • Verification: test nested dialogs and confirm focus returns to the expected control.

„untangle-codebase“ wird verwendet. Assess direct payment-provider dependencies in checkout and refunds.

Erwartetes Ergebnis:

  • Problem: checkout and refund workflows depend on provider-specific implementation details.
  • Proposed fix: define a provider interface for the operations both workflows require.
  • Verification: exercise each supported provider and compare observable behavior before and after refactoring.

Sicherheitsaudit

Mittleres Risiko
v1 • 6.11.2026 Versionsbericht öffnen

All 29 static findings are false positives caused by Markdown backticks around examples, identifiers, and code fences. No evidence found of credential theft, data exfiltration, or prompt injection. One semantic risk concerns stripping function bodies without specifying a separate analysis copy, which could damage working source.

1
Gescannte Dateien
143
Analysierte Zeilen
0
Prüfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel
Skeleton Generation Lacks Source Preservation Safeguard
The tip says "script away the function bodies" without requiring a separate analysis copy. Applying this directly could erase implementation and uncommitted work.
The instruction explicitly proposes removing function bodies but provides no output-location or preservation constraint. Data loss depends on the implementing agent modifying originals.
Geprüft von: codex
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/caldoai-untangle-codebase/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/caldoai-untangle-codebase/security.svg)](https://skillstore.io/skills/caldoai-untangle-codebase?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/caldoai-untangle-codebase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caldoai-untangle-codebase/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/caldoai-untangle-codebase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

caldoai. (2026). untangle-codebase security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/caldoai-untangle-codebase/audits/1

BibTeX-Zitat

@techreport{caldoai-caldoai-untangle-codebase-2026, author = {caldoai}, title = {untangle-codebase security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/caldoai-untangle-codebase/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "untangle-codebase security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "caldoai" date-released: "2026-11-06" url: "https://skillstore.io/skills/caldoai-untangle-codebase/audits/1" identifiers: - type: other value: "skillstore:caldoai-untangle-codebase:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
55
Architektur
65
Wartbarkeit
87
Inhalt
65
Gemeinschaft
65
Spezifikationskonformität

Was Sie erstellen können

Understand an Unfamiliar Repository

Document hidden dependencies and misplaced responsibilities before proposing changes to an inherited codebase.

Consolidate Repeated Behavior

Group duplicated workflow logic and special cases under shared redesign decisions while preserving intended behavior.

Review Architectural Boundaries

Use dependency relationships and change history to assess module ownership and prioritize coordinated structural improvements.

Diese Prompts ausprobieren

Start With a Problem Inventory
Use untangle-codebase to inspect this repository. Complete the options discussion and problem inventory, then pause before implementation.
Focus on One Area
Use untangle-codebase on [area]. Keep comments and tests unchanged. Group structural fixes in a decision log and preserve behavior.
Evaluate Shared Redesigns
Use untangle-codebase to analyze [workflow]. Compare dependency relationships and Git history, then propose shared fixes for related problems before implementation.
Run a Controlled Refactoring Cycle
Use untangle-codebase within [scope]. Preserve existing user changes and source files during analysis. Implement approved decisions in reviewable batches with regression checks.

Bewährte Praktiken

  • Agree on scope and optional cleanup choices before allowing implementation.
  • Preserve user changes, and create any analysis skeletons separately without overwriting repository source.
  • Review the decision log and run relevant regression checks after each structural change.

Vermeiden

  • Treating every special case as removable without checking the requirement it protects.
  • Removing comments or tests without the optional cleanup choice and a clear behavioral justification.
  • Allowing repeated whole-repository redesign without checkpoints, scope limits, or behavior verification.

Häufig gestellte Fragen

What does the skill actually provide?
It provides instructions for repository analysis, redesign, implementation, and verification. It does not include executable utilities.
Which assistants are listed as supported?
The listing supports Claude, Codex, and Claude Code. Tool availability and subagent support depend on the host environment.
Can I focus on one area?
Yes. The skill accepts an optional area or concern, and your prompt can set explicit scope boundaries.
Will it remove comments and tests automatically?
The instructions require asking whether to include each cleanup option. Test cleanup comes last because tests provide regression protection.
Does it guarantee unchanged behavior?
No. It requires final behavior checks, but verification depends on available tests and agent judgment.
What precaution matters when creating a code skeleton?
Require a separate analysis copy. The instruction to remove function bodies does not explicitly protect original source files or uncommitted changes.

Entwicklerdetails

Autor

caldoai

Lizenz

Unbekannt

Skillstore-Revision

r1

Versionshinweis

Der Autor hat keine Version angegeben.

Ref.

c993c6abcbffafea2683d7748b53b3dfaf438415

Aktualität der Wartung

9.11.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md

Alle anzeigen