plugins/regenrek.agentic-engineer-core/skills/search-context/SKILL.md
Find, clone, inspect, and summarize high-quality GitHub reference repositories for coding agents. Use when a user asks for GitHub reference projects, examples, prior art, inspiration, implementation patterns, or includes "$search-context" in a coding prompt.
npx skillsauth add regenrek/agent-skills github-reference-contextInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill when the user wants an agent to find useful GitHub reference projects for a feature, UI pattern, implementation pattern, platform, framework, or library.
Trigger examples:
$search-context visual progress indicator ring for ios app latest 2026find GitHub references for a SwiftUI circular progress ringhow do good projects implement this pattern?clone a few reference repos and tell me which files to inspectgive this agent GitHub context before implementing the featureThe goal is not faster raw code search. The goal is better reference selection, fewer cloned repositories, less context noise, and a clean manifest that tells the coding agent what to inspect.
rg.This skill expects these tools to be available in the shell:
gh, authenticated with GitHubgitrg, also known as ripgrepnode version 18 or newerBefore running a search, use:
node scripts/search-context.mjs check
From the skill directory:
node scripts/search-context.mjs run "visual progress indicator ring for ios app latest 2026" \
--preset ios-swift \
--max-repos 5
If the package has been linked with npm link, use:
search-context run "visual progress indicator ring for ios app latest 2026" --preset ios-swift
Use a preset when the platform or stack is clear.
ios-swift: iOS, Swift, SwiftUI, UIKit, Apple UI components.web-react: React, Next.js, Vite, Tailwind, component patterns.generic: fallback when the stack is unknown.The preset controls GitHub language filters, query expansion, local rg terms, file globs, and scoring hints.
Use the local library for existing third-party folders or previously curated references:
node scripts/search-context.mjs library add ../third-party/some-repo --tags react,ui --presets web-react --project current
node scripts/search-context.mjs library search "ProgressRing"
node scripts/search-context.mjs run "React progress ring" --sources library,github --project current
Library metadata is stored in the OS user cache at <cache>/library/repositories.json. Project-specific clusters are stored in the same registry when --project current or --project <id> is used.
Keep FFF or any future long-lived index as an optional search backend under this library workflow. Do not make FFF a hard requirement and do not split this into a separate skill unless the goal changes from reference selection to general code search.
Use blobless shallow clones for reference repositories:
git clone --depth=1 --filter=blob:none --single-branch --no-tags <repo-url> <user-cache>/github-reference-context/refs/owner__repo
Do not use normal full clones by default. Do not clone more than 5 repositories unless the user explicitly asks. Do not install dependencies from cloned reference repos. Do not execute cloned project code. Do not copy large code blocks into the agent context.
By default, keep cloned repositories and manifests in the OS user cache, not in the current project. Use --project-local only when the user explicitly wants .refs/ and .context/ in the current directory. Inside a Git worktree, those project-local paths must be ignored or the CLI will refuse to write them.
Use repository discovery first.
Avoid using gh search code as the primary source.
Use local rg after cloning to verify that the repository actually contains relevant implementation files.
Good reference selection beats raw search speed.
Score repositories by:
pushed_atAlways produce a Markdown manifest. The default output is:
<user-cache>/github-reference-context/runs/<timestamp>/reference-context.md
The manifest must include:
Do not dump full repositories or long file contents into the response.
After the manifest is written, the coding agent should:
Run a reference search:
node scripts/search-context.mjs run "SwiftUI progress ring animation" --preset ios-swift
Preview searches without cloning:
node scripts/search-context.mjs run "SwiftUI progress ring animation" --preset ios-swift --dry-run
Use SSH for cloning:
node scripts/search-context.mjs run "SwiftUI progress ring animation" --preset ios-swift --ssh
Search the local reference library:
node scripts/search-context.mjs library search "Circle().trim"
Clean cached reference repos older than 30 days:
node scripts/search-context.mjs clean --older-than 30d
Treat cloned repositories as untrusted code. Never run project scripts, package managers, tests, binaries, or install commands inside a reference repository unless the user explicitly asks and the risk is understood. Use reference repos for ideas, structure, and comparison, not for blind copying. Surface license information in the manifest when available.
tools
Live-test any Electron desktop app with native-devtools-mcp, Chrome DevTools Protocol, screenshots, OCR, and accessibility tools. Use when the user asks for Electron UI verification, MCP-driven app control, renderer CDP interaction, native desktop automation, screenshots, or OCR-driven checks.
testing
Find, clone, inspect, and summarize high-quality GitHub reference repositories for coding agents. Use when a user asks for GitHub reference projects, examples, prior art, inspiration, implementation patterns, or includes "$search-context" in a coding prompt.
testing
Run or install repo security leak checks with BetterLeaks and Trivy. Use when asked to scan for leaked secrets, vulnerable dependencies, misconfigurations, add secret-leak guardrails, add BetterLeaks, add forbidden-path hooks, or run secleak-check before release.
development
Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks, CI install checks, and optional incident IOC profiles.