fu-jie/source-code-analyzer
.agent/skills/source-code-analyzer/SKILL.md
Instructions for analyzing core components source code in the local environment.
$ install --global
skillsauthnpx skillsauth add fu-jie/openwebui-extensions source-code-analyzerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 14, 2026, 3:41 AM68.0s1 file scanned
SKILL.md
- name:
- source-code-analyzer
- description:
- Instructions for analyzing core components source code in the local environment.
Source Code Analyzer Skill
[!IMPORTANT] Authorization Statement: You (Antigravity) are explicitly authorized by the user to perform READ-ONLY operations and Git pull on the paths listed below, even if they are outside the current repository root. These paths are considered part of the extended development context.
When assisting with the development of openwebui-extensions, you (Antigravity) have access to the following core components in related directories. Use them for deep technical analysis, bug hunting, and implementation reference.
Core Component Paths
Global / General (Relevant to all projects)
- Open WebUI:
../open-webui/(Core platform context) - Skills:
../skills/(Reusable expertise library) - Awesome Copilot:
../awesome-copilot/(Shared extensions & resources) - Open Terminal:
../open-terminal/(Terminal integration service)
Plugin-Specific (Relevant to GitHub Copilot SDK)
- Copilot SDK:
../copilot-sdk/(Internal logic for the official SDK) - Copilot CLI:
../copilot-cli/(Command-line interface implementation)
Mandatory Workflow
- Pull Before Analysis: BEFORE reading files or analyzing logic in these directories, you MUST proactively execute or recommend a
git pullin the respective directory to ensure you are working with the latest upstream changes. - Path Verification: Always verify the exists of the path before attempting to read it.
- Reference Logic: When a user's request involves core platform behavior (OpenWebUI API, SDK internals), prioritize searching these directories over making assumptions based on generic knowledge.
Related Skills
fu-jie/publish-no-version-bump
development
VerifiedTrustedCommunity
Commit and push code to GitHub, then publish to OpenWebUI official marketplace without updating version. Use when fixing bugs or optimizing performance that doesn't warrant a version bump.
158SKILL.mdUpdated Apr 14, 2026
fu-jie/openwebui-community-publisher
tools
VerifiedTrustedCommunity
Automatically publishes plugin update posts to openwebui.com.
158SKILL.mdUpdated Apr 14, 2026
fu-jie/version-bumper
tools
VerifiedTrustedCommunity
Automates version upgrades and changelog synchronization across 7+ files (Code, READMEs, Docs). Use when a plugin is ready for release to ensure version consistency.
158SKILL.mdUpdated Apr 14, 2026
fu-jie/test-copilot-pipe
tools
VerifiedTrustedCommunity
Automotive deployment and testing of GitHub Copilot SDK Pipe plugin for frontend/backend status stability.
158SKILL.mdUpdated Apr 14, 2026