davepoon/ontoly-software-graph
plugins/all-skills/skills/ontoly-software-graph/SKILL.md
Use Ontoly's deterministic Software Graph and MCP server for codebase architecture, request tracing, dependency analysis, and impact analysis.
$ install --global
skillsauthnpx skillsauth add davepoon/buildwithclaude ontoly-software-graphInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 15, 2026, 3:35 AM162.6s1 file scanned
SKILL.md
- name:
- ontoly-software-graph
- category:
- development-code
- description:
- Use Ontoly's deterministic Software Graph and MCP server for codebase architecture, request tracing, dependency analysis, and impact analysis.
- license:
- MIT
Ontoly Software Graph
Use Ontoly when a coding agent needs graph-backed software understanding before searching source files directly.
Ontoly builds a deterministic Software Graph from a TypeScript repository and exposes it through CLI queries, MCP capabilities, and agent skills. The skill teaches workflow only; Ontoly remains the source of truth.
Workflow
- Check whether an Ontoly graph already exists in the repository, such as
.ontoly/,SoftwareGraph.json, or documented Ontoly scripts. - If the graph is missing and local graph output is appropriate, run
ontoly build .. - Check graph diagnostics, trust, semantic coverage, framework detection, and validation before making architecture claims.
- Prefer Ontoly CLI or MCP capabilities for architecture summaries, request tracing, dependency analysis, configuration lookup, framework reports, and impact analysis.
- Inspect source files only when the graph is missing, incomplete, untrusted for the question, or the user explicitly asks for source-level verification.
Use Cases
- Explain repository architecture, module ownership, services, routes, packages, or dependencies.
- Trace a request, route, controller, service, provider, dependency, or call chain.
- Estimate impact for removing, renaming, or refactoring a symbol, module, package, route, or service.
- Review circular imports, dead code, configuration usage, environment variables, or graph diagnostics.
Evidence Rules
- Separate graph facts from inference.
- Cite exact graph nodes, edges, packages, routes, diagnostics, or query outputs when available.
- Treat unresolved imports, low trust, missing framework detection, and validation failures as answer limitations.
- Do not claim a relationship exists unless Ontoly reports it or the answer labels it as inferred.
Example Prompts
Use Ontoly to explain this repository's architecture.
Use Ontoly to trace the login flow from route to controller, service, and repository.
Use Ontoly to find what depends on UserRepository and what breaks if it changes.
Related Skills
davepoon/anti-ui-slop
development
VerifiedTrustedCommunity
Stop coding agents from shipping generic UI. Use UIZZE's 800,000+ real web and iOS screens to build product-specific interfaces, define a design contract, cover required states, and run a hard finish gate. Use for web or iOS UI design, implementation, redesign, critique, and pre-ship review in Codex, Claude Code, Cursor, Copilot, and other coding agents.
3,220SKILL.mdUpdated Jul 27, 2026
davepoon/theboardroom
development
VerifiedTrustedCommunity
Convene an AI executive board of directors (CEO, CFO, COO, CLO, CISO sub-agent personas) to vet a business idea, product concept, new service offering, M&A target, or operational initiative — and deliver an integrated board memo with a Go/No-Go recommendation. Use this skill whenever the user wants an idea vetted, stress-tested, or reviewed from multiple executive perspectives; asks to "present this to the board," "run this by the boardroom," "vet this idea," "poke holes in this plan," or "prep me for a board meeting"; or shares a business plan, pitch, proposal, or initiative document and asks for structured executive feedback. Also trigger when the user asks for a Go/No-Go decision, risk review across finance/legal/security/operations, or preparation for presenting an initiative to real leadership.
3,183SKILL.mdUpdated Jul 16, 2026
davepoon/travel-agent-skill
data-ai
VerifiedTrustedCommunity
私人旅行管家 — 从出发地到目的地的完整行程规划+攻略导出。 输入出发地、目的地、天数、预算、风格偏好，自动输出闭环行程， 包含交通推荐、酒店推荐、美食路线、每日预算，并可选生成攻略。 当用户提到「做攻略」「旅行规划」「旅游计划」「行程安排」时使用。
3,180SKILL.mdUpdated Jul 15, 2026
davepoon/nika
testing
VerifiedTrustedCommunity
Runs repeatable AI work as checked, budgeted workflow files. The agent captures a repeated task as a .nika.yaml DAG, audits cost/permits/schema before a single token is spent, and runs it with tamper-evident traces.
3,180SKILL.mdUpdated Jul 15, 2026