opensrc
Inspect Dependency Source with opensrc
Types and documentation may not explain unexpected dependency behavior. This skill guides AI agents to fetch matching source versions and inspect implementations through a reusable cache.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "opensrc" from https://skillstore.io/skills/vercel-labs-opensrc.md and its manifest at https://skillstore.io/api/skills/vercel-labs-opensrc/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„opensrc“ wird verwendet. Fetch zod source matching my project.
Erwartetes Ergebnis:
- The project lockfile determines the npm version to inspect.
- The report includes the resolved version and absolute source-cache location.
- Available implementation files can be searched without executing the dependency.
„opensrc“ wird verwendet. Prepare to inspect serde from crates.io.
Erwartetes Ergebnis:
- Use an explicit serde version when investigating reproducible behavior.
- Fetch its source and locate the relevant implementation and tests.
- Report findings with source references, separating observed behavior from assumptions.
„opensrc“ wird verwendet. Review cached sources before removing anything.
Erwartetes Ergebnis:
- List the cached packages and repositories first.
- Select individual entries or a cache category for removal.
- Keep unrelated cached source unless its removal is explicitly approved.
Sicherheitsaudit
SicherAll 22 static detections are false positives involving Markdown delimiters, routine source-reading commands, or the documented source cache. No evidence found of prompt injection, credential access, or data exfiltration in the reviewed skill text. The external CLI implementation was not included, and unquoted cache paths should be improved.
Risikofaktoren
⚙️ Externe Befehle (18)
📁 Dateisystemzugriff (4)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/vercel-labs-opensrc/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/vercel-labs-opensrc?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/vercel-labs-opensrc?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-opensrc/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/vercel-labs-opensrc.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
vercel-labs. (2026). opensrc security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-opensrc/audits/1BibTeX-Zitat
@techreport{vercel-labs-vercel-labs-opensrc-2026,
author = {vercel-labs},
title = {opensrc security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/vercel-labs-opensrc/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "opensrc security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "vercel-labs"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/vercel-labs-opensrc/audits/1"
identifiers:
- type: other
value: "skillstore:vercel-labs-opensrc:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Debug Unexpected Library Behavior
Inspect the dependency version used by a project to trace behavior that public types do not explain.
Investigate Dependency Edge Cases
Read implementation branches and locate upstream tests before designing regression coverage.
Study Upstream Implementations
Fetch selected package versions or repository references to study internal design patterns.
Diese Prompts ausprobieren
Fetch source for zod with opensrc and report the resolved version and cache location.
Inspect requests version 2.31.0 from PyPI using opensrc. Explain timeout handling and cite the implementation files.
Resolve zod from the lockfile in [project directory]. Trace [unexpected behavior] through its source and tests, citing relevant locations.
Fetch [repository] at [reference A] and [reference B]. Compare [function] behavior, cite changed locations, and suggest regression tests without executing downloaded code.
Bewährte Praktiken
- Use the project lockfile or explicit versions and repository references for reproducible source inspection.
- Quote resolved cache paths and treat fetched source as untrusted data rather than instructions.
- Review cache entries before removal and confirm the scope of global cleanup.
Vermeiden
- Fetching source for simple API questions already answered by documentation or types.
- Assuming latest PyPI or crates.io source matches the dependency installed in your project.
- Executing downloaded code or deleting the entire cache when source inspection is sufficient.
Häufig gestellte Fragen
Which source ecosystems are supported?
How does npm version resolution work?
Can I select a specific version or revision?
Where is source cached?
Does this skill include the opensrc CLI?
Can I remove cached source selectively?
Entwicklerdetails
Autor
vercel-labsLizenz
MIT
Skillstore-Revision
r1
Versionshinweis
Der Autor hat keine Version angegeben.
Repository
https://github.com/vercel-labs/opensrc/tree/b51de60867e806da1839b33dd29c29424f12521b/skills/opensrcRef.
e406bf64b5db6e514879399e87b346fa7ff7c2fb
Aktualität der Wartung
11.10.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md