codebase-explorer
Explore the Empathy Ledger Codebase
Complex repository structure makes features and data flows difficult to trace. This skill maps Empathy Ledger files, services, routes, schemas, and dependencies.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "codebase-explorer" from https://skillstore.io/skills/acurioustractor-codebase-explorer.md and its manifest at https://skillstore.io/api/skills/acurioustractor-codebase-explorer/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "codebase-explorer". Where is consent management implemented?
Expected outcome:
- API route: /api/stories/[id]/consent.
- Core service: consent.service.ts.
- Related storage includes consent proofs and story distribution records.
Using "codebase-explorer". How does a browser action reach the database?
Expected outcome:
- A React component sends a request to an API route.
- The API route calls the service layer.
- The service uses a Supabase client to access PostgreSQL with row-level security.
Using "codebase-explorer". How is tenant isolation described?
Expected outcome:
Queries obtain the current profile tenant and add a tenant_id filter before accessing tenant-scoped records.
Security Audit
SafeAll 18 static findings are false positives caused by Markdown formatting, illustrative code, or a documentation link. No executable shell behavior, unsafe network access, path traversal operation, prompt injection, or malicious intent was found.
Risk Factors
⚙️ External commands (16)
🌐 Network access (1)
📁 Filesystem access (1)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/acurioustractor-codebase-explorer/audits/11?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/acurioustractor-codebase-explorer?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/acurioustractor-codebase-explorer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/acurioustractor-codebase-explorer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/acurioustractor-codebase-explorer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Acurioustractor. (2026). codebase-explorer security audit report (audit version 11) [Author version unspecified]. Skillstore. https://skillstore.io/skills/acurioustractor-codebase-explorer/audits/11BibTeX citation
@techreport{acurioustractor-acurioustractor-codebase-explorer-2026,
author = {Acurioustractor},
title = {codebase-explorer security audit report (audit version 11)},
institution = {Skillstore},
year = {2026},
number = {11},
url = {https://skillstore.io/skills/acurioustractor-codebase-explorer/audits/11},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "codebase-explorer security audit report (audit version 11)"
version: "unspecified"
type: report
authors:
- name: "Acurioustractor"
date-released: "2026-07-10"
url: "https://skillstore.io/skills/acurioustractor-codebase-explorer/audits/11"
identifiers:
- type: other
value: "skillstore:acurioustractor-codebase-explorer:audit:11"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Learn the repository structure
Find the main files, services, routes, types, and tables for an unfamiliar Empathy Ledger feature.
Trace a feature flow
Follow a user action across components, API routes, services, Supabase clients, and database tables.
Review architecture boundaries
Map tenant isolation, role hierarchy, service ownership, and dependencies before planning a change.
Try These Prompts
Find where story consent is implemented. List the relevant routes, services, types, and database tables, then explain how they connect.
Trace a story creation request from the React component to PostgreSQL. Include each file, boundary, and tenant isolation check you can verify.
Compare distribution, revocation, and consent workflows. Identify shared services, policy checks, persistence tables, and important differences.
Build an architecture map for project transcripts. Verify API, service, Supabase, schema, tenant, and role boundaries. Mark assumptions and missing evidence.
Best Practices
- Ask about one feature or flow at a time.
- Request direct file evidence and clearly marked assumptions.
- Verify documented paths and behavior against the current repository before making changes.
Avoid
- Do not treat the quick reference as a substitute for reading implementation code.
- Do not assume every query has correct tenant filtering without verification.
- Do not expose secrets or private data while sharing codebase findings.
Frequently Asked Questions
Which repository does this skill cover?
Can it modify source files?
Does it run the listed shell commands automatically?
Are the documented paths always current?
Can it perform a complete security audit?
What output formats does it support?
Developer Details
Author
AcurioustractorLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
b9e5ae9c7a884b8b0bc6894c293164039a0aa79d
Maintenance freshness
7/18/2026
Usage
13 downloads · 226 views
File structure
📄 SKILL.md