opensrc
Inspect Dependency Source with opensrc
Types and documentation may not explain unexpected dependency behavior. This skill guides AI agents to fetch matching source versions and inspect implementations through a reusable cache.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Review the Skillstore skill "opensrc" from https://skillstore.io/skills/vercel-labs-opensrc.md and its manifest at https://skillstore.io/api/skills/vercel-labs-opensrc/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsquâun Agent IA, un crawler ou un script a besoin dâun contexte propre au lieu de lire toute la page.
Tester
Utilisation de « opensrc ». Fetch zod source matching my project.
RĂ©sultat attendu:
- The project lockfile determines the npm version to inspect.
- The report includes the resolved version and absolute source-cache location.
- Available implementation files can be searched without executing the dependency.
Utilisation de « opensrc ». Prepare to inspect serde from crates.io.
RĂ©sultat attendu:
- Use an explicit serde version when investigating reproducible behavior.
- Fetch its source and locate the relevant implementation and tests.
- Report findings with source references, separating observed behavior from assumptions.
Utilisation de « opensrc ». Review cached sources before removing anything.
RĂ©sultat attendu:
- List the cached packages and repositories first.
- Select individual entries or a cache category for removal.
- Keep unrelated cached source unless its removal is explicitly approved.
Audit de sécurité
SûrAll 22 static detections are false positives involving Markdown delimiters, routine source-reading commands, or the documented source cache. No evidence found of prompt injection, credential access, or data exfiltration in the reviewed skill text. The external CLI implementation was not included, and unquoted cache paths should be improved.
Facteurs de risque
âïž Commandes externes (18)
đ AccĂšs au systĂšme de fichiers (4)
Partager et citer ce rapport
Partagez le rapport dâĂ©valuation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.
Copier le lien du rapport
https://skillstore.io/skills/vercel-labs-opensrc/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/vercel-labs-opensrc?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/vercel-labs-opensrc?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-opensrc/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/vercel-labs-opensrc.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
vercel-labs. (2026). opensrc security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-opensrc/audits/1Citation BibTeX
@techreport{vercel-labs-vercel-labs-opensrc-2026,
author = {vercel-labs},
title = {opensrc security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/vercel-labs-opensrc/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "opensrc security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "vercel-labs"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/vercel-labs-opensrc/audits/1"
identifiers:
- type: other
value: "skillstore:vercel-labs-opensrc:audit:1"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: MoyenCe que vous pouvez créer
Debug Unexpected Library Behavior
Inspect the dependency version used by a project to trace behavior that public types do not explain.
Investigate Dependency Edge Cases
Read implementation branches and locate upstream tests before designing regression coverage.
Study Upstream Implementations
Fetch selected package versions or repository references to study internal design patterns.
Essayez ces prompts
Fetch source for zod with opensrc and report the resolved version and cache location.
Inspect requests version 2.31.0 from PyPI using opensrc. Explain timeout handling and cite the implementation files.
Resolve zod from the lockfile in [project directory]. Trace [unexpected behavior] through its source and tests, citing relevant locations.
Fetch [repository] at [reference A] and [reference B]. Compare [function] behavior, cite changed locations, and suggest regression tests without executing downloaded code.
Bonnes pratiques
- Use the project lockfile or explicit versions and repository references for reproducible source inspection.
- Quote resolved cache paths and treat fetched source as untrusted data rather than instructions.
- Review cache entries before removal and confirm the scope of global cleanup.
Ăviter
- Fetching source for simple API questions already answered by documentation or types.
- Assuming latest PyPI or crates.io source matches the dependency installed in your project.
- Executing downloaded code or deleting the entire cache when source inspection is sufficient.
Foire aux questions
Which source ecosystems are supported?
How does npm version resolution work?
Can I select a specific version or revision?
Where is source cached?
Does this skill include the opensrc CLI?
Can I remove cached source selectively?
Détails du développeur
Auteur
vercel-labsLicence
MIT
RĂ©vision Skillstore
r1
Avis de version
Lâauteur nâa dĂ©clarĂ© aucune version.
DĂ©pĂŽt
https://github.com/vercel-labs/opensrc/tree/b51de60867e806da1839b33dd29c29424f12521b/skills/opensrcRĂ©f
e406bf64b5db6e514879399e87b346fa7ff7c2fb
RĂ©cence de maintenance
11/10/2026
Utilisation
0 téléchargements · 0 vues
Structure de fichiers
đ SKILL.md