knoopx/codemapper
agent/skills/codemapper/SKILL.md
Analyzes codebases by mapping symbols (functions, classes, methods) using tree-sitter AST parsing. Use when exploring unknown code, finding bugs, understanding call graphs, or validating code health.
$ install --global
skillsauthnpx skillsauth add knoopx/pi codemapperInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 5, 2026, 8:12 AM107.7s1 file scanned
SKILL.md
- name:
- codemapper
- description:
- Analyzes codebases by mapping symbols (functions, classes, methods) using tree-sitter AST parsing. Use when exploring unknown code, finding bugs, understanding call graphs, or validating code health.
codemapper (cm)
Maps symbols across your codebase using tree-sitter AST parsing. Everything runs in-memory — no databases. Supports Python, JavaScript/TypeScript, Rust, Java, Go, C, Swift, and Markdown.
Exploring an Unknown Codebase
Start with project overview, then drill down:
cm stats . # File counts, symbol breakdown, parse timing
cm map . --level 2 --format ai # File structure with symbol counts (compact)
cm query <symbol> # Find functions, classes, methods (fuzzy search)
cm inspect ./path/to/file # Deep dive into one file
Finding a Bug
Trace the suspected code and its callers:
cm query <suspected_function> --show-body # See the implementation
cm callers <function> # Who calls this?
cm trace <entry_point> <suspected_function> # Call path A → B
cm tests <function> # Find tests for it
Before Refactoring
Understand impact before changing:
cm callers <function> # Reverse dependencies — who calls this?
cm callees <function> # Forward dependencies — what does it call?
cm tests <function> # Verify coverage exists
cm since main --breaking # Breaking changes vs main
Understanding an API Surface
cm entrypoints . # Public exported symbols with no internal callers
cm implements <interface> # All implementations of an interface
cm schema <DataClass> # Field structure for structs, classes, dataclasses
Git History (requires a git repo)
cm diff main # Symbol-level changes vs a commit
cm since v1.0 --breaking # Breaking API changes since a tag
cm blame <symbol> ./file.rs # Who last modified this symbol?
cm history <symbol> # Full evolution of a symbol across commits
Useful Flags
--format ai— compact output optimized for LLM context (recommended)--show-body— include actual code, not just signatures--exact— case-sensitive matching (default is fuzzy)--no-cache— always reindex
Tips
- Start with
cm stats .to understand project composition before deeper queries - Use
--format aifor the most token-efficient output - Git commands require a git repo; snapshots save current state for later comparison
- Small repos parse in under 20ms; large repos auto-enable fast mode
Related Skills
knoopx/notify
tools
VerifiedTrustedCommunity
Inform the user what is happening — skip passive lookups
52SKILL.mdUpdated May 20, 2026
knoopx/markdown-rendering
development
VerifiedTrustedCommunity
Renders markdown to self-contained HTML with a custom dark stylesheet and opens in browser. Use when previewing markdown documents, generating styled HTML from README or report files.
52SKILL.mdUpdated May 20, 2026
knoopx/jj-hunk
testing
VerifiedTrustedCommunity
Programmatic hunk selection for Jujutsu — split, commit, or squash specific hunks without interactive prompts. Use when making partial commits or selective squashes.
52SKILL.mdUpdated May 18, 2026
knoopx/jj-core
content-media
VerifiedTrustedCommunity
Manage version control with Jujutsu (jj) — no staging area, immediate changes, smart rebasing. Use when navigating history, squashing, or pushing to Git remotes.
52SKILL.mdUpdated May 18, 2026