AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Map Codebase

skill-danielvm-git-bigpowers-map-codebase · by danielvm-git

\"Derives the tech-stack doc from scratch by scanning the codebase — analyzes stack, architecture, and gray areas (error handling, API shapes) and persists findings into specs/tech-architecture/tech-stack.md. Run when the tech doc doesn't exist yet; use survey-context to consume it once it does.\

No reviews yet
0 installs
37 views
0.0% view→install

Install

$ agentstack add skill-danielvm-git-bigpowers-map-codebase

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-danielvm-git-bigpowers-map-codebase)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Map Codebase? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Map Codebase

Perform a deep architectural and structural analysis of the codebase. Unlike survey-context which identifies "where we are", map-codebase identifies "what we are dealing with" and "how things are done".

> Use this vs survey-context: map-codebase BUILDS the tech-stack doc by scanning the codebase from scratch. survey-context READS existing specs/tech-architecture docs without re-deriving them. Run map-codebase when specs/tech-architecture/tech-stack.md doesn't exist yet; run survey-context when it does.

> HARD GATE — Cold analysis only. Do NOT assume architectural patterns without reading the code. If the codebase structure surprises you, call out the delta.

Process

1. Identify Core Stack & Dependencies

  • Scan package.json, Cargo.toml, requirements.txt, etc.
  • Identify primary framework, runtime, and critical libraries (ORM, Auth, State, UI).
  • Note version constraints and any deprecated or unusual dependencies.

2. Map High-Level Architecture

  • Identify the entry points (CLI, Web, API).
  • Map the primary data flow (e.g., Controller → Service → Repository).
  • Identify where business logic lives vs. where I/O lives.
  • Look for established patterns (e.g., hexagonal, layered, feature-folders).

3. Analyze "Gray Areas" (The "How")

Search for patterns and anti-patterns in these categories:

  • Error Handling: Are exceptions caught early or bubbled? Is there a global error handler? Are error messages structured?
  • API Shapes: Is it REST, GraphQL, or RPC? What is the casing (camelCase, snake_case)? How are responses structured?
  • Type Safety: Is it strictly typed? Are there many any or unsafe blocks? Are interfaces used for DIP?
  • Observability: Is there structured logging? Are there health checks? Where do logs go?
  • Testing: What is the test coverage strategy? Are mocks used? Where do tests live?

4. Identify Planning "Signals"

Look for signals that will influence upcoming plans:

  • Consistency Gaps: "Half the project uses async/await, the other half uses Promises."
  • Debt Hotspots: "The AuthManager is 1500 lines and handles both JWT and session logic."
  • Integration Points: "We need to talk to the Stripe API, but there's no wrapper yet."
  • Conventions: "The team always uses functional components over classes."

5. Persist to specs/tech-architecture/tech-stack.md

Compile all findings into specs/tech-architecture/tech-stack.md. This file serves as the project's "Long-Term Memory".

# Project Context

## Stack
- [Framework/Language]
- [Key Libraries]

## Architecture
- [Pattern Description]
- [Data Flow]

## Conventions (Observed)
- [Error Handling Pattern]
- [API Design]
- [Type System]

## Signals / Active Considerations
- [Gap 1]
- [Hotspot 2]

When to Use

  • When first joining a project.
  • Before a major refactor or architectural change.
  • When survey-context reveals a lack of domain knowledge.
  • To refresh specs/tech-architecture/tech-stack.md after significant changes.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.