Install
$ agentstack add skill-pablodiazjorge-prompt-forge-explore-codebase ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Codebase Exploration Playbook
Golden Rules
- First: check for errors —
get_errors()before anything else. Fixing compile errors is priority zero. - NEVER read files one by one —
grep_searchwith regex alternation first semantic_searchfor concepts,grep_searchfor exact symbolsfile_searchfor globs to discover structure instantly- Read 100+ lines at a time — fewer reads = fewer tokens
- Parallel reads — read 2-3 key files in one turn
- Avoid the "grep tax" — use familiar formats (Markdown/YAML), not obscure ones
Progressive Disclosure (Skill Pattern)
Top coding agents (Codex, Claude Code) use this — do the same:
- Metadata (~100 tokens): name + description loaded for ALL files
- Instructions (< 500 lines): body loaded when triggered
- Resources (on-demand): only files referenced via Markdown links
Strategy by Goal
| Goal | Approach | |------|----------| | "Where is X?" | grep_search → vscode_listCodeUsages → read defining file | | "How does this work?" | file_search("**/*.{ts,js}") → semantic_search("architecture") → read ONE key file deeply | | "Find tests for Y" | file_search("**/Y*.spec.ts") — glob is instant | | "What deps?" | read_file("package.json", 1, 100) — one read | | "Are there errors?" | get_errors() FIRST — then grep for error symbols | | "Find all imports of X" | grep_search("import.*X", isRegexp=true) across **/*.ts |
Tool Quick Reference
| Tool | Best for | |------|---------| | get_errors(filePaths) | Always first — compile/lint errors | | grep_search(query, isRegexp, includePattern) | Text/regex: function|class|interface | | semantic_search(query) | Natural language: "how does auth work" | | file_search(query) | Glob: **/*.spec.ts, **/*.component.ts | | read_file(path, start, end) | Read 100+ line chunks (parallel when possible) | | vscode_listCodeUsages(symbol, lineContent) | All references of a symbol | | list_dir(path) | Directory listing |
Anti-Patterns
| Don't | Do | |-------|-----| | Read 15 files sequentially | Search first, read 2-3 key files in parallel | | Read 20-line chunks | 100-200 lines at a time | | Single-keyword searches | Regex alternation | | Guess file locations | file_search with globs | | Use obscure formats for context | Markdown/YAML — models know them best | | Skip error checking | get_errors() as step 1 |
Token Economics
| Approach | Tokens | |----------|--------| | Sequential 15 files × 500 tokens | ~7,500 | | With this playbook | ~700 | | Savings | ~91% |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: pablodiazjorge
- Source: pablodiazjorge/prompt-forge
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.