opensrc
Inspect Dependency Source with opensrc
Types and documentation may not explain unexpected dependency behavior. This skill guides AI agents to fetch matching source versions and inspect implementations through a reusable cache.
Установить с помощью моего Агента
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Review the Skillstore skill "opensrc" from https://skillstore.io/skills/vercel-labs-opensrc.md and its manifest at https://skillstore.io/api/skills/vercel-labs-opensrc/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Ресурсы для AI-агентов
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Протестировать
Использование «opensrc». Fetch zod source matching my project.
Ожидаемый результат:
- The project lockfile determines the npm version to inspect.
- The report includes the resolved version and absolute source-cache location.
- Available implementation files can be searched without executing the dependency.
Использование «opensrc». Prepare to inspect serde from crates.io.
Ожидаемый результат:
- Use an explicit serde version when investigating reproducible behavior.
- Fetch its source and locate the relevant implementation and tests.
- Report findings with source references, separating observed behavior from assumptions.
Использование «opensrc». Review cached sources before removing anything.
Ожидаемый результат:
- List the cached packages and repositories first.
- Select individual entries or a cache category for removal.
- Keep unrelated cached source unless its removal is explicitly approved.
Аудит безопасности
БезопасноAll 22 static detections are false positives involving Markdown delimiters, routine source-reading commands, or the documented source cache. No evidence found of prompt injection, credential access, or data exfiltration in the reviewed skill text. The external CLI implementation was not included, and unquoted cache paths should be improved.
Факторы риска
⚙️ Внешние команды (18)
📁 Доступ к файловой системе (4)
Поделиться и цитировать этот отчет
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
Копировать ссылку на отчёт
https://skillstore.io/skills/vercel-labs-opensrc/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportЗначок Markdown
[](https://skillstore.io/skills/vercel-labs-opensrc?utm_source=security_passport_badge)Значок HTML
<a href="https://skillstore.io/skills/vercel-labs-opensrc?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-opensrc/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Встраиваемая карточка
<iframe src="https://skillstore.io/embed/skills/vercel-labs-opensrc.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Академические ссылки (APA · BibTeX · CFF)
Цитата APA
vercel-labs. (2026). opensrc security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-opensrc/audits/1Цитата BibTeX
@techreport{vercel-labs-vercel-labs-opensrc-2026,
author = {vercel-labs},
title = {opensrc security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/vercel-labs-opensrc/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "opensrc security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "vercel-labs"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/vercel-labs-opensrc/audits/1"
identifiers:
- type: other
value: "skillstore:vercel-labs-opensrc:audit:1"
description: "Skillstore immutable audit report identifier"
Оценка Skillstore
Почему такая оценка Достоверность доказательств: СреднийЧто вы можете построить
Debug Unexpected Library Behavior
Inspect the dependency version used by a project to trace behavior that public types do not explain.
Investigate Dependency Edge Cases
Read implementation branches and locate upstream tests before designing regression coverage.
Study Upstream Implementations
Fetch selected package versions or repository references to study internal design patterns.
Попробуйте эти промпты
Fetch source for zod with opensrc and report the resolved version and cache location.
Inspect requests version 2.31.0 from PyPI using opensrc. Explain timeout handling and cite the implementation files.
Resolve zod from the lockfile in [project directory]. Trace [unexpected behavior] through its source and tests, citing relevant locations.
Fetch [repository] at [reference A] and [reference B]. Compare [function] behavior, cite changed locations, and suggest regression tests without executing downloaded code.
Лучшие практики
- Use the project lockfile or explicit versions and repository references for reproducible source inspection.
- Quote resolved cache paths and treat fetched source as untrusted data rather than instructions.
- Review cache entries before removal and confirm the scope of global cleanup.
Избегать
- Fetching source for simple API questions already answered by documentation or types.
- Assuming latest PyPI or crates.io source matches the dependency installed in your project.
- Executing downloaded code or deleting the entire cache when source inspection is sufficient.
Часто задаваемые вопросы
Which source ecosystems are supported?
How does npm version resolution work?
Can I select a specific version or revision?
Where is source cached?
Does this skill include the opensrc CLI?
Can I remove cached source selectively?
Сведения для разработчиков
Автор
vercel-labsЛицензия
MIT
Ревизия Skillstore
r1
Примечание о версии
Автор не указал версию.
Репозиторий
https://github.com/vercel-labs/opensrc/tree/b51de60867e806da1839b33dd29c29424f12521b/skills/opensrcСсылка
e406bf64b5db6e514879399e87b346fa7ff7c2fb
Актуальность поддержки
11.10.2026
Использование
0 загрузок · 0 просмотров
Структура файлов
📄 SKILL.md