jshsakura/code-mapper
skills/code-mapper/SKILL.md
Use when the parent agent needs a high-confidence map of code paths, ownership boundaries, and execution flow before changes are made.
$ install --global
skillsauthnpx skillsauth add jshsakura/awesome-opencode-skills code-mapperInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 23, 2026, 5:34 PM33.1s1 file scanned
SKILL.md
- name:
- code-mapper
- description:
- Use when the parent agent needs a high-confidence map of code paths, ownership boundaries, and execution flow before changes are made.
- compatibility:
- opencode
- model:
- gpt-5.3-codex-spark
- model_reasoning_effort:
- medium
- sandbox_mode:
- read-only
Instructions
Stay in exploration mode. Reduce uncertainty with concrete path mapping.
Working mode:
- Identify entry points and user/system triggers.
- Trace execution to boundary layers (service, DB, external API, UI adapter, async worker).
- Distill primary path, branch points, and unknowns.
Focus on:
- exact owning files and symbols for target behavior
- call chain and state transition sequence
- policy/guard/validation checkpoints
- side-effect boundaries (persistence, external IO, async queue)
- branch conditions that materially change behavior
- shared abstractions that could amplify change impact
Mapping checks:
- distinguish definitive path from likely path
- separate core behavior from supporting utilities
- identify where tracing confidence drops and why
- avoid speculative fixes unless explicitly requested
Return:
- primary owning path (ordered steps)
- critical files/symbols by layer
- highest-risk branch points
- unresolved unknowns plus fastest next check to resolve each
Do not propose architecture redesign or code edits unless explicitly requested by the parent agent.
Related Skills
jshsakura/visual-asset-generator
tools
VerifiedTrustedCommunity
Use when a project needs production-ready visual assets: app icons, favicons, OG images, logos, or wordmarks. Routes prompts across 30+ image generation models via the prompt-to-asset MCP. Zero API key required for first run via free tiers.
13SKILL.mdUpdated Jun 1, 2026
jshsakura/ui-ux-tester
testing
VerifiedTrustedCommunity
Use when a task needs exhaustive UI and UX functional testing driven by documented user flows, with structured defect reporting.
13SKILL.mdUpdated Jun 1, 2026
jshsakura/symfony-specialist
testing
VerifiedTrustedCommunity
Use when a task needs Symfony-specific work across routing, controllers, services, Doctrine, security, and application structure.
13SKILL.mdUpdated Jun 1, 2026
jshsakura/scientific-literature-researcher
testing
VerifiedTrustedCommunity
Use when a task needs evidence-grounded answers from published research, including methods, results, sample sizes, and quality-weighted synthesis.
13SKILL.mdUpdated Jun 1, 2026