Install
$ agentstack add skill-allemaar-open-skills-investigate ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
/investigate
Read-only fact-gathering — understand the codebase before acting.
> Structured execution spec: [protocol.yon](protocol.yon). Read it for the canonical rules and step sequence; this file is explanation. The two must stay in sync — if you edit one, update the other and refresh the @STAMP date.
> Caller Options. Before executing, run the Caller Options protocol (caller-options/SKILL.md): triage this invocation for material optionality across the venues and modes declared in front-matter; if one path clearly dominates, proceed silently; otherwise surface the options to the caller. A resolved-invocation marker means COP already ran — execute the fixed combination directly, do not re-enter COP.
> Fact-Gathering Protocol. READ ONLY. No plans, no code, no refactors. Just facts.
Phase 1 — Context Loading
- Parse the query — identify target files, directories, or concepts from the user's request.
- List files — read the target directory structure.
- Read entrypoints — load
package.json,README.md, index files, or whatever serves as the front door to the target area.
Phase 2 — Pattern Discovery
- Search for usages — grep for functions, components, or patterns relevant to the query. Follow call sites and import chains.
- Load relevant skills — check if a domain skill applies:
- If your repository maintains its own standards skills (UI conventions, coding standards), load the matching one — this pack does not ship them.
- Otherwise → any matching installed skill for additional context
Phase 3 — Reporting
Output a structured fact report:
- Files Found — paths to all relevant files, not just descriptions
- Patterns Used — architectural or implementation patterns in play
- Dependencies — what this area depends on; what depends on it
- Constraints Discovered — existing conventions, locked APIs, shared types — anything that would constrain a future implementation
Rules
- MUST NOT create plans or write code — read only
- MUST include file paths in the report, not just descriptions
> Human output. This skill's handler-facing output obeys the human-output > contract (human-output/SKILL.md).
> Next skills. On completion, run the Next Skills protocol (next-skills/SKILL.md): surface the next-skills recommendations from front-matter for the caller to pick. Offer only — never auto-invoke.
> Self-improvement. On completion, run the Self-Improvement Protocol (self-improve/SKILL.md): if this run surfaced a concrete, blocking-or-recurring weakness in this skill, propose a specific fix for the handler to approve. Conservative — silent otherwise. Never auto-apply.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: allemaar
- Source: allemaar/open-skills
- License: Apache-2.0
- Homepage: https://allemaar.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.