Scan codebases for conventions and security concerns.
npx skills add https://github.com/alicanerdogan/dotfiles --skill learn-codebase-alicanerdogan
Please help me install this Agent Skill. Skill: learn-codebase Source: https://github.com/alicanerdogan/dotfiles/tree/main/pi/skills/learn-codebase Command: npx skills add https://github.com/alicanerdogan/dotfiles --skill learn-codebase-alicanerdogan
Discover project conventions and surface security concerns for teams starting work in a new or unfamiliar codebase, helping you quickly understand rules and potential risks.
Ask the AI to scan the project root for agent instruction files and config directories to surface conventions and security concerns.
High-intent search queries and answers about installing and using this skill.
Scan root-level agent instruction files (CLAUDE.md, AGENTS.md, .cursorrules) and configuration directories to surface project conventions and security risks. This identifies hardcoded secrets, insecure patterns, and dangerous configurations for new or unfamiliar codebases.
Aggregate agent instruction files and configuration directories to summarize codebase conventions for onboarding. This surfaces project rules, risky dependencies, and dangerous configurations, helping new developers understand conventions and potential security concerns quickly.
Yes, you can scan for hardcoded secrets, insecure patterns, and risky dependencies in a codebase. The scan identifies dangerous configurations and security smells, providing a compact, actionable summary of potential security concerns.
Yes, it scans root-level agent instruction files like CLAUDE.md, AGENTS.md, and .cursorrules, along with configuration directories such as .claude/ and .cursor/. It aggregates these files to surface established project conventions and security concerns.
Audit unfamiliar code by scanning for hardcoded secrets, insecure patterns, risky dependencies, and dangerous configurations. This surfaces potential security concerns and project conventions, providing a compact summary for teams auditing unfamiliar codebases.
Yes, discovered conventions can optionally be registered as skills in .pi/settings.json to reuse in future tasks. This allows teams to persist codebase conventions discovered during onboarding or security audits for later reference.
Proxy2021Scan local filesystems to identify software projects and infer tech stacks.
peerasak-uScans root-level configs and reports conventions and security concerns in codebases.
ivanshamaevAudit Vault, Kubernetes, Airflow, dbt, and CI configurations for insecure secret patterns.
offers-pngRun dependency, SAST, and HoundDog scans in parallel and report vulnerabilities.
