Cbm Onboard
Register a Git repository with codebase-memory-mcp, create a managed .cbmignore baseline, install a non-clobbering post-commit reindex hook, and run the initial index. Use when asked to index, onboard, register, or keep a repository current in Codebase Memory.
Install
$ agentstack add skill-connorgriffin-skills-cbm-onboard ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-connorgriffin-skills-cbm-onboard) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Onboard a repository to Codebase Memory
Use the bundled script to make one maintained checkout one Codebase Memory project. Never index a directory containing several repositories.
Requirements
- Install
codebase-memory-mcpand make its executable available onPATH, or
set CODEBASE_MEMORY_BIN to the executable path.
- Resolve the installed
cbm-onboardskill directory.
Workflow
- Resolve the target Git repository. Default to the current repository.
- Run:
``sh /scripts/cbm-onboard.sh ``
The script resolves linked worktrees to the maintained checkout, reconciles a marked baseline inside .cbmignore, preserves custom exclusions, and adds a managed reindex block to Git's configured post-commit hook without deleting an existing shell hook. It refuses symlink targets. A non-shell foreign hook is left unchanged with a warning because composing it would be unsafe.
- Verify the project through the available Codebase Memory MCP interface with
index_status or list_projects.
- Report node and edge counts when available.
- Tell the user that
.cbmignoreis tracked and should be committed. The Git
hook is clone-local, so rerun onboarding after a fresh clone.
The initial index uses full mode. Post-commit indexing uses fast mode in a detached process. Re-running onboarding is idempotent.
Repositories dominated by YAML, prose, or shell may produce a thin graph; say so rather than refusing to index them.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ConnorGriffin
- Source: ConnorGriffin/skills
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.