Install
$ agentstack add skill-fikrilal-engineering-agent-skills-orient-codebase ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Orient Codebase
Build an evidence-grounded map that helps the learner reason about the system. Do not produce an exhaustive file inventory.
Workflow
- Establish the learner context from the conversation. Identify known languages, frameworks, and architectural patterns. Ask only when missing context would materially change the explanation.
- Read repository instructions and source-of-truth documents first. Then inspect manifests, build scripts, CI, entry points, and the top-level tree.
- Identify the product shape, deployed processes, runtime boundaries, persistence, external systems, and primary user workflows.
- Trace at least one representative vertical path from entry point to observable result. Use this path to make abstract boundaries concrete.
- Distinguish architectural intent documented by the repository from structure inferred from code.
- Identify only the highest-leverage reading targets and material uncertainties.
- Stop once the learner has a useful map. Offer deeper exploration by workflow or module instead of front-loading every detail.
Output
Default to this compact shape:
- System in one paragraph: what it does and how it runs.
- System map: major boundaries and where state lives, using a short list or text diagram.
- Start here: three to five files or workflows that build the mental model fastest.
Include a representative workflow when it makes the map easier to understand. Leave build commands, exhaustive module lists, documentation drift, and deeper risks for follow-up unless they are essential.
Explanation Rules
- Ground important claims in source files, configuration, tests, or recorded command output.
- Use file and line references when the client supports them.
- Start with purpose and observable behavior, then reveal implementation detail.
- Adapt explanations to knowledge already stated by the learner.
- Use plain words and short sentences. Give the answer before supporting detail.
- State uncertainty only when it changes the mental model.
Guardrails
- Do not modify files, install dependencies, or run destructive commands.
- Do not infer architecture from directory names alone.
- Do not treat documentation, naming, or tests as proof when runtime wiring contradicts them.
- Do not explain framework basics unless they are necessary for this repository.
- Prefer one concrete execution path over broad abstraction lists.
- Keep the initial orientation concise enough to retain. Expand interactively.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: fikrilal
- Source: fikrilal/engineering-agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.