Install
$ agentstack add skill-jamestorrevillas-dev-skills-code-reading ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Code Reading
Core Principle
Code is read 10x more than it's written. Reading code is a skill you actively develop — not a passive activity.
Codebase Onboarding Order
Always explore a new codebase in this order:
- README — What does it do? How do I run it?
- Package/dependency files — What tools and frameworks are used?
- Entry point — Where does execution start? (main.ts, index.js, app.py)
- Core domain models — What are the main data structures?
- Key user flows — Trace one important feature end-to-end
- Tests — Tests reveal intended behavior and edge cases
- Config/env files — What is configurable? What are the environments?
Code Tracing Method
For understanding a specific flow:
1. Start from the trigger (user action, API call, scheduled job)
2. Follow the execution path step by step
3. Note: what data flows in? what comes out?
4. Identify where external systems are called
5. Mark where business logic lives vs. infrastructure
Questions to Ask While Reading
- What is this component responsible for? (single responsibility check)
- What does it need to run? (dependencies)
- What does it produce/return?
- What could make it fail?
- Why was it written this way? (check git blame/history for context)
Using AI for Code Reading
"Explain what this function does, including:
- What it takes as input
- What it returns
- Any side effects
- Non-obvious behavior I should know about"
"Walk me through how [feature] works,
starting from [entry point] to [output]"
"What would I need to understand to safely
modify [specific part] of this code?"
Navigating Large Codebases
- Search patterns — use grep/ripgrep to find usages of a function/class
- Git blame — who changed this and why?
- Git log — when was this introduced? what changed over time?
- Tests — run tests while reading to see what behavior is expected
- Dependency graph — which modules depend on what?
Warning Signs While Reading
- Functions longer than 50 lines (doing too much)
- Deep nesting (> 3 levels) — logic is hard to follow
- Many parameters (> 4) — likely needs refactoring
- Comments explaining WHAT (should be obvious) vs WHY (actually useful)
- No tests — higher risk, be extra careful when modifying
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: jamestorrevillas
- Source: jamestorrevillas/dev-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.