AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Workflow Codebase Knowledge

skill-lugassawan-swe-workbench-workflow-codebase-knowledge · by lugassawan

Use to understand an unfamiliar codebase — presents architecture overview, module map, public API surfaces, and conventions as a layered mental model. Knowledge-presentation only: read-only sweep, no defect ranking, no reasoning chains. Distinct from workflow-codebase-audit (finding-oriented defect detection) and tech-writer / /swe-workbench:document (generates new prose artifacts). Ideal for onb…

No reviews yet
0 installs
20 views
0.0% view→install

Install

$ agentstack add skill-lugassawan-swe-workbench-workflow-codebase-knowledge

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-lugassawan-swe-workbench-workflow-codebase-knowledge)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Workflow Codebase Knowledge? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Workflow: Codebase Knowledge

Announce at start: "Activating workflow-codebase-knowledge to present a structured knowledge document."

When to invoke

  • Onboarding to an unfamiliar codebase: "walk me through this repo."
  • Knowledge-handoff request: "give the incoming engineer a mental model of the service."
  • Reviewer context-gathering: "what are the public API surfaces before I start the PR review?"
  • Architecture exploration: "show me the module boundaries and their relationships."

When NOT to invoke

  • Defect detection or ranked findings → use swe-workbench:workflow-codebase-audit (cold-start multi-axis sweep with reasoning chains and severity ranking).
  • Generating new prose documentation (READMEs, ADRs, ARCHITECTURE files) → use /swe-workbench:document which delegates to the tech-writer subagent.
  • Known bug with a repro → use /swe-workbench:debug.
  • PR diff review → use /swe-workbench:review.

Composition

Read-only sweep — no subagents dispatched. May delegate file discovery to Explore agents in parallel for breadth when the path scope is wide. Never writes to disk.

Path argument

An optional path narrows the scope: /swe-workbench:codebase-knowledge src/ focuses all phases on src/ and its descendants. Without a path, the sweep covers the entire repo root.

A token is treated as a path if it contains /, starts with ., or matches an existing directory in the repo; otherwise the entire argument string is treated as natural-language context with no path scoping.

Phases

Phase 1 — Scope & entry-points

Identify the repo type (library, service, CLI, monorepo) and locate entry-points:

  • Executable entry-points: main.*, index.*, __main__.py, cmd/, bin/.
  • Build manifests: package.json, Cargo.toml, go.mod, pyproject.toml, pom.xml.
  • Public interface declarations: exported symbols, __init__.py, mod.rs, index.ts.

Record the path argument (or . if absent) and apply it as a filter to all subsequent phases.

Phase 2 — Module map

Walk the top-level directory structure. For each module or package:

  • Name and purpose (one line — inferred from code, not invented).
  • Dependencies on other modules in this repo (imports, use, require).
  • Notable size signals (number of files, presence of sub-packages).

Stop at 2 levels of depth unless the path argument targets a subtree.

Phase 3 — Public API surfaces

Identify the externally-facing interface of the codebase:

  • HTTP/RPC routes: router registrations, controller annotations, protobuf service definitions.
  • Exported functions/types in library packages.
  • CLI commands and flags.
  • Event schemas: topics, message contracts.

List only the surface, not the implementation detail.

Phase 4 — Patterns & conventions

Read 3–5 representative files per module to identify recurring patterns:

  • Error handling style (exceptions, Result types, error codes).
  • Testing conventions (framework, fixture style, what is and is not mocked).
  • Naming and file-organisation conventions.
  • Dependency injection or service-locator patterns.
  • Any notable abstractions that appear across multiple modules.

Phase 5 — Render

Produce the knowledge document using the rendering template below. Omit any section where there is genuinely nothing to say — do not pad. Apply the diagram signal-to-noise rule before including any Mermaid block.

Rendering template

````markdown

Codebase Knowledge — —

Overview

Module map

| Module | Purpose | Depends on | |--------|---------|------------| | ` | | , ` |

Architecture diagram

flowchart LR
    A[] --> B[]

Public API surfaces

| Surface | Kind | Location | |---------|------|----------| | ` | HTTP route / exported fn / CLI cmd / event topic | ` |

Patterns & conventions

  • Error handling:
  • Testing:
  • Naming:
  • Notable abstractions:

````

Diagram guidelines

Include a Mermaid diagram only when it adds information that the module map table cannot convey.

| Situation | Rule | |-----------|------| | ≤5 modules, flat structure | Skip — the module map table is sufficient | | Meaningful cross-module dependency edges | Use flowchart LR | | Request/response lifecycle across layers | Use sequenceDiagram | | Hierarchical package nesting | Use graph TD | | Flat list of peer modules (no edge topology) | Skip — a diagram would just redraw the table |

Cap at 1 diagram per output section. Omit if the diagram would have fewer than 3 nodes.

Preferred formats: flowchart LR, sequenceDiagram, graph TD.

Absolute rules

  • Read-only. Never invoke Edit, Write, or any shell command that modifies the filesystem.
  • Never invent structure. Every module, API, and pattern listed must be traceable to actual code. If a module's purpose is unclear, say so — do not guess.
  • Cap diagrams. At most 1 diagram per output section; omit when the signal-to-noise rule says Skip.
  • Omit empty sections. If Phase 3 yields no public API surface, omit the Public API surfaces section entirely. Silence is correct; padding misleads.
  • No defect reporting. This skill presents structure; it does not rank findings, assign severity, or suggest fixes. Route those needs to workflow-codebase-audit.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.