athola/graph-build
plugins/gauntlet/skills/graph-build/SKILL.md
Builds or updates the code knowledge graph via tree-sitter AST and SQLite. Use when setting up the graph before search or blast-radius analysis.
$ install --global
skillsauthnpx skillsauth add athola/claude-night-market graph-buildInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 15, 2026, 5:31 AM132.0s1 file scanned
SKILL.md
- name:
- graph-build
- description:
- Builds or updates the code knowledge graph via tree-sitter AST and SQLite. Use when setting up the graph before search or blast-radius analysis.
- model_hint:
- standard
Build Code Knowledge Graph
Build or update the .gauntlet/graph.db knowledge graph
for the current codebase.
Steps
-
Detect target: Use the current working directory or a user-specified path.
-
Check for existing graph: If
.gauntlet/graph.dbexists, run an incremental update. Otherwise, run a full build. -
Run the build script:
For full build:
python3 ${CLAUDE_PLUGIN_ROOT}/scripts/graph_build.py <dir>For incremental update:
python3 ${CLAUDE_PLUGIN_ROOT}/scripts/graph_build.py <dir> --incremental -
Report results: Show the JSON output including files parsed, nodes created, edges created, and duration.
-
Suggest next steps: Recommend searching the graph or running blast radius analysis.
When To Use
- At the start of a session to build structural awareness
- After significant code changes to update the graph
- Before running blast radius analysis or flow tracing
- When the user asks about codebase structure
When NOT To Use
- Querying a graph that already exists (use
gauntlet:graph-search) - Building the challenge knowledge base (use
gauntlet:extract)
What Gets Parsed
The graph extracts nodes (File, Class, Function, Type, Test) and edges (CALLS, IMPORTS_FROM, INHERITS, CONTAINS, IMPLEMENTS, TESTED_BY) from 20+ languages including Python, JavaScript, TypeScript, Go, Rust, Java, C/C++, Ruby, and PHP.
Storage
- Database:
.gauntlet/graph.db(SQLite with WAL mode) - Auto-creates
.gauntlet/.gitignoreto prevent commits - Incremental updates use SHA-256 hashing to skip unchanged files
Exit Criteria
- [ ]
.gauntlet/graph.dbexists and is a valid SQLite file after the skill completes;.gauntlet/.gitignoreexists to prevent the database from being committed - [ ] Build report JSON includes all four keys:
files_parsed,nodes_created,edges_created,duration; values are non-zero for non-empty codebases - [ ] Incremental update path used when
.gauntlet/graph.dbalready exists (script invoked with--incremental); full build only on first run - [ ] Next-step suggestions presented to the user: search the graph or run blast-radius analysis
Related Skills
athola/architecture-paradigm-domain-driven
data-ai
VerifiedTrustedCommunity
Models a business in its own language. Use when the domain has real business rules to capture.
323SKILL.mdUpdated Jul 15, 2026
athola/ideate
research
VerifiedTrustedCommunity
Generate diverse solution candidates with category-spanning ideation methods and rotation. Use when stuck on a design or fighting repetitive LLM output.
323SKILL.mdUpdated Jun 8, 2026
athola/validate-pr
development
VerifiedTrustedCommunity
Generates and self-executes a diff-derived test plan for a PR. Use when validating PR changes before merge. Do not use for code review; use sanctum:pr-review.
323SKILL.mdUpdated Jun 8, 2026
athola/graduated-implementation
development
VerifiedTrustedCommunity
Ramps implementation ambition a notch only after the prior increment is understood. Use when building a feature you must understand, not just ship.
323SKILL.mdUpdated Jun 8, 2026