スキル explain-codebase
📦

explain-codebase

v1.0 コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド

Explain an Unfamiliar Codebase

Unfamiliar repositories make it difficult to find entry points, setup steps, and important dependencies. This skill guides a file-referenced onboarding map with one traced flow and clear open questions.

対応: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 70 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト
Review the Skillstore skill "explain-codebase" from https://skillstore.io/skills/agentkitco-explain-codebase.md and its manifest at https://skillstore.io/api/skills/agentkitco-explain-codebase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

テストする

「explain-codebase」を使用しています。 Show the expected outline for a repository onboarding summary.

期待される結果:

  • Purpose: project problem and intended users.
  • How to run: discovered commands and verification status.
  • Map: directories and their responsibilities.
  • Reading order: three inspected files with reasons.
  • Open questions: details not established from available evidence.

「explain-codebase」を使用しています。 What should a central-flow explanation include?

期待される結果:

  • Entry: the inspected request handler, command, or event consumer.
  • Processing: relevant functions in execution order, with file references.
  • Data boundary: storage or external service calls found in the inspected code.
  • Result: the response or output, with any unverified behavior identified.

セキュリティ監査

中リスク

Eight findings are false positives involving Markdown formatting, read-only history inspection, citation rules, or explicit secret protections. One finding is confirmed because the skill directs execution of unfamiliar repository tests and lint commands without requiring review or isolation. No evidence found of data exfiltration, destructive intent, or prompt injection.

1
スキャンされたファイル
46
解析済み行数
0
レビュー項目
0
誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中
System reconnaissance
2. **Run it**: install, run, test commands from manifests, Makefile and CI config. Run the cheap one
The instruction runs repository-defined tests and lint commands without requiring prior review or isolation. These commands can execute arbitrary code from an unfamiliar repository.

検出されたパターン

System reconnaissance
監査者: codex 監査履歴を表示 →
このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く
セキュリティ評価

レポートリンクをコピー

https://skillstore.io/skills/agentkitco-explain-codebase/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentkitco-explain-codebase/security.svg)](https://skillstore.io/skills/agentkitco-explain-codebase?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/agentkitco-explain-codebase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentkitco-explain-codebase/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/agentkitco-explain-codebase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学術引用 (APA · BibTeX · CFF)

APA形式の引用

agentkitco. (2026). explain-codebase security audit report (audit version 2) [Author version 1.0]. Skillstore. https://skillstore.io/skills/agentkitco-explain-codebase/audits/2

BibTeX形式の引用

@techreport{agentkitco-agentkitco-explain-codebase-2026, author = {agentkitco}, title = {explain-codebase security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/agentkitco-explain-codebase/audits/2}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "explain-codebase security audit report (audit version 2)" version: "1.0" type: report authors: - name: "agentkitco" date-released: "2026-10-22" url: "https://skillstore.io/skills/agentkitco-explain-codebase/audits/2" identifiers: - type: other value: "skillstore:agentkitco-explain-codebase:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由 証拠の信頼度: 中
55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠

作成できるもの

Orient a New Developer

Find setup steps, entry points, and three useful files to read before starting a first contribution.

Prepare a Technical Handoff

Summarize module responsibilities, external dependencies, and unresolved questions for a team taking ownership.

Plan an Integration Investigation

Trace a central request through application layers and identify configuration names and service boundaries relevant to an integration.

これらのプロンプトを試す

Beginner: Get Oriented
Explain this repository in one page. Cover its purpose, directory map, entry points, and three files to read first. Cite files you inspect.
Intermediate: Understand Setup
Map setup, run, and test commands from project files. List environment variable names only. Do not execute commands; mark them unverified.
Advanced: Trace a Central Flow
Trace [request, command, or event] from entry to storage or output. List files and functions in order, cite evidence, and label inferences.
Advanced: Prepare an Ownership Map
Create an onboarding map of [repository]. Include one central flow, external services, quality signals, recent churn, and open questions. Review commands before requesting execution approval.

ベストプラクティス

  • Specify the repository and one central workflow to keep the map focused.
  • Review repository commands and hooks before approving execution in an isolated environment.
  • Require file references, verification status, and explicit labels for inferred behavior.

回避

  • Running unfamiliar installation, test, or lint commands without review or isolation.
  • Including secret values when configuration variable names are sufficient.
  • Treating a concise onboarding map as exhaustive documentation or a completed security audit.

よくある質問

What does this skill produce?
A concise onboarding map covering purpose, setup, structure, one central flow, dependencies, reading priorities, and open questions.
Which AI tools are listed as supported?
The marketplace metadata lists Claude, Codex, and Claude Code. Repository access and command permissions depend on the host environment.
Does it execute project commands?
The instructions call for running inexpensive tests and lint checks. Review commands first and isolate execution when the repository is untrusted.
How does it handle environment secrets?
It explicitly prohibits printing secret values from environment files or configuration. Reports should list variable names only.
Will it explain every file?
No. It prioritizes a two-level directory map, key entry points, and one central flow instead of an exhaustive file tour.
How does it handle missing evidence?
Claims must cite inspected files. Inferences receive labels, unexecuted commands remain unverified, and unresolved details become open questions.

開発者情報

作成者

agentkitco

ライセンス

MIT

作者バージョン

v1.0

Skillstore リビジョン

r1

バージョンに関する注意

作者が宣言したバージョンは有効な SemVer ではありません。

参照

18efac79a818d7e997295839638fdd21906cfd1c

メンテナンスの新しさ

2026/10/22

利用状況

5 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md