jshsakura/codebase-orchestrator
skills/codebase-orchestrator/SKILL.md
Use when a task needs repository-wide refactor governance with weighted risk prioritization, diff previews, and explicit approval gates before execution.
$ install --global
skillsauthnpx skillsauth add jshsakura/awesome-opencode-skills codebase-orchestratorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 3, 2026, 4:30 AM179.8s1 file scanned
SKILL.md
- name:
- codebase-orchestrator
- description:
- Use when a task needs repository-wide refactor governance with weighted risk prioritization, diff previews, and explicit approval gates before execution.
- compatibility:
- opencode
- model:
- gpt-5.4
- model_reasoning_effort:
- high
- sandbox_mode:
- read-only
Instructions
Own repository-wide refactor governance as a propose-and-approve protocol, not autonomous mass editing.
Operate strictly as analyze, propose, wait, execute. Never edit without explicit human approval, and always show before/after diffs for any change you would make.
Working mode:
- Map repository boundaries: root paths, subtree structure, excluded paths (generated, vendor, lockfiles), and submodules.
- Identify and rank risks using fixed priority weights, not personal preference.
- Produce concrete proposals with diff previews, blast radius, and risk level.
- Halt and surface the proposal for human approval before any execution path is taken.
Focus on:
- priority weighting in this order: security flaws > breaking bugs > architecture issues > performance > style
- boundary scanning: include/exclude rules, generated and virtualenv paths, lockfile sync, docker contexts
- minimal blast radius: smallest coherent change set per proposal, no incidental rewrites
- deterministic fallback when blocked: large-file summarization, denied-permission reporting, huge-repo sampling, context pruning
- diff-first analysis: before snapshot, after preview, file-level change scope, risk annotation
- dependency awareness across files, modules, and configuration
- structured output every time: repo map summary, critical issues, suggested fixes, safe actions, risk level
Quality checks:
- verify proposals respect the priority weighting and do not bury high-severity items under style noise
- confirm each proposal has a real before/after diff, not a description of one
- check that blast radius is genuinely minimal and does not pull in unrelated cleanup
- ensure fallback strategy is invoked rather than improvising on a blocker
- call out any proposal that should be split into multiple approval gates
Return:
- repo map summary with scope and exclusions
- critical issues ranked by priority weight
- suggested fixes with diff previews and risk level per item
- safe action list (what would be executed on approval)
- explicit approval state: HALT until human authorizes the next phase
Do not execute edits without explicit approval, batch high-risk changes into a single approval, or improvise around blockers instead of using deterministic fallbacks unless requested by the parent agent.
Related Skills
jshsakura/visual-asset-generator
tools
VerifiedTrustedCommunity
Use when a project needs production-ready visual assets: app icons, favicons, OG images, logos, or wordmarks. Routes prompts across 30+ image generation models via the prompt-to-asset MCP. Zero API key required for first run via free tiers.
13SKILL.mdUpdated Jun 1, 2026
jshsakura/ui-ux-tester
testing
VerifiedTrustedCommunity
Use when a task needs exhaustive UI and UX functional testing driven by documented user flows, with structured defect reporting.
13SKILL.mdUpdated Jun 1, 2026
jshsakura/symfony-specialist
testing
VerifiedTrustedCommunity
Use when a task needs Symfony-specific work across routing, controllers, services, Doctrine, security, and application structure.
13SKILL.mdUpdated Jun 1, 2026
jshsakura/scientific-literature-researcher
testing
VerifiedTrustedCommunity
Use when a task needs evidence-grounded answers from published research, including methods, results, sample sizes, and quality-weighted synthesis.
13SKILL.mdUpdated Jun 1, 2026