スキル wiki-qa
📦

wiki-qa

安全

Get instant answers about your codebase

Stop hunting through files to understand how your code works. This skill reads your source code and provides evidence-based answers with inline citations to specific files and line numbers.

対応: Claude Codex Code(CC)
🥉 75 ブロンズ
1

スキルZIPをダウンロード

2

Claudeでアップロード

設定 → 機能 → スキル → スキルをアップロードへ移動

3

オンにして利用開始

テストする

「wiki-qa」を使用しています。 How does the data validation work?

期待される結果:

Data validation is handled through a multi-layer approach:

1. **Schema Validation** - Input is validated against JSON schemas (src/validators/schema.ts:15-42)
2. **Business Rules** - Custom validators check domain constraints (src/validators/business.ts:8-25)
3. **Sanitization** - User input is sanitized before storage (src/utils/sanitize.ts:12-18)

Key Files:
| File | Role |
|------|------|
| src/validators/schema.ts | Schema definition and validation |
| src/validators/business.ts | Domain-specific rules |
| src/utils/sanitize.ts | Input sanitization |

「wiki-qa」を使用しています。 Where is the API client configured?

期待される結果:

The API client is configured in `src/api/client.ts:22-45`. It uses:

- Base URL from environment variables (line 28)
- Timeout of 30 seconds (line 32)
- Retry logic for failed requests (lines 38-42)

The client is initialized in `src/app.ts:15` and passed to services via dependency injection.

「wiki-qa」を使用しています。 What happens when a user uploads a file?

期待される結果:

File upload follows this workflow:

1. **Request received** - Router routes POST /upload to handler (src/routes/upload.ts:12)
2. **Validation** - File size and type checked (src/middleware/validate.ts:45-52)
3. **Storage** - File saved to temp directory (src/services/storage.ts:78-92)
4. **Processing** - Background job processes file (src/jobs/process.ts:15-30)

Note: Virus scanning is mentioned in comments but not implemented (src/services/storage.ts:85).

セキュリティ監査

安全
v1 • 2/25/2026

Static analysis detected 4 potential issues that are all false positives upon manual review. The skill is a legitimate documentation/Q&A tool that reads source code files and answers questions based on file content. No actual code execution, external commands, or cryptographic operations are present.

1
スキャンされたファイル
40
解析された行数
0
検出結果
1
総監査数
セキュリティ問題は見つかりませんでした
監査者: claude

品質スコア

38
アーキテクチャ
100
保守性
85
コンテンツ
50
コミュニティ
100
セキュリティ
100
仕様準拠

作れるもの

New developer onboarding

Quickly understand how specific components work by asking natural language questions about the codebase structure and implementation.

Legacy code investigation

Navigate unfamiliar codebases efficiently by asking where features are defined and how different modules interact.

Architecture documentation

Generate explanations of system architecture and component relationships based on actual source code evidence.

これらのプロンプトを試す

Basic code question
How does authentication work in this project?
Find implementation location
Where is the user validation logic defined?
Understand component relationships
How do the frontend and backend communicate in this application?
Debugging context
What could cause the payment processing to fail based on the error handling code?

ベストプラクティス

  • Ask specific questions about particular components, functions, or features for the most detailed responses
  • Review the Key Files table to understand which files are relevant to your question
  • Follow the inline citations to dive deeper into specific implementation details
  • Use follow-up questions to explore related components or understand how different parts connect

回避

  • Asking questions about topics unrelated to the codebase (this skill only analyzes repository files)
  • Expecting runtime behavior analysis without looking at test files or execution traces
  • Assuming answers include information from external documentation or APIs
  • Requesting code execution or testing functionality (this is read-only analysis)

よくある質問

What types of questions can this skill answer?
This skill answers questions about implementation details, file locations, component relationships, and how specific features work based on the source code in your repository.
Does this skill execute my code or run tests?
No, this skill only reads and analyzes source files. It does not execute code, run tests, or access runtime behavior.
How accurate are the answers?
Answers are grounded entirely in source code evidence with inline citations. The skill will tell you when information is insufficient rather than guessing.
Can this skill understand code in any programming language?
Yes, the skill analyzes code as text and can work with any programming language present in your repository.
What if the skill cannot find the answer?
The skill will explicitly state when information is insufficient and suggest specific files to examine for more details.
Does this skill access external documentation or APIs?
No, this skill only analyzes files within your repository. It does not access external documentation, APIs, or online resources.

開発者の詳細

作成者

sickn33

ライセンス

MIT

参照

main

ファイル構成

📄 SKILL.md