acquire-codebase-knowledge
Skill0 starsChanged 6 months agoMITView on GitHub
Use this skill when the user explicitly asks to map, document, or onboard into an existing codebase. Trigger for prompts like "map this codebase", "document this architecture", "onboard me to this repo", or "create codebase docs". Do not trigger for routine feature implementation, bug fixes, or narrow code edits unless the user asks for repository-level discovery.
- Reads credentials
7 other projects use a version of this, 2 of them edited.
Adopted by
Most recently taken up by
- AgnesAI-Labs/agnet-skills-cnedited, first seen Nov 1, 2026
- github/awesome-copilotedited, first seen Oct 25, 2026
- sb-dev/narrative-production-skillsword for word, first seen Oct 20, 2026
- Ghosteken/agent-harnesstheir own version, first seen Oct 1, 2026
- patterson-agents/skillsword for word, first seen Aug 12, 2026
- ReaperOAK/ForgeOSword for word, first seen Jun 8, 2026
Other versions7 projects use a version of this.
Word for word · 4
- sb-dev/narrative-production-skills★ 2100% same
- 5kuper/ai-docs-kit★ 0100% same
- patterson-agents/skills★ 0100% same
- ReaperOAK/ForgeOS★ 0100% same
Edited · 2
- github/awesome-copilot★ 41k100% same
- AgnesAI-Labs/agnet-skills-cn★ 192% same
Wrote their own version · 1
- Ghosteken/agent-harness★ 2same name
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository14 other files it gives its agents.
- AGENTS.mdAGENTS.md
- template/AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- template/CLAUDE.mdCLAUDE.md
- .github/copilot-instructions.mdCopilot instructions
- agent-governanceSkill
- bootstrap-prompt-builderSkill
- code-tourSkill
- doublecheckSkill
- mcp-security-auditSkill
- quality-playbookSkill
- security-auditSkill
- security-reviewSkill
- suggest-awesome-github-copilot-skillsSkill
The file
Show its rules and text
We split this skill into the rules it gives an agent
18 rules. 12 are common, 0 are distinctive, and 6 are very specific to this project.
12
Common
Most of the 3 edited versions we read keep these.
0
Distinctive
This author's own choices. Worth a look.
6
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Common: line 24
Before finishing, all of the following must be true:
- Common: line 27
Every claim is traceable to source files, config, or terminal output.
- Common: line 29
Every document includes a short "evidence" list with concrete file paths.
- Common: line 45
If the user supplies a focus area (for example: "architecture only" or "testing and concerns"):
- Common: line 47
Always run Phase 1 in full.
- Common: line 54
Run the scan script from the target project root:
- Common: line 60
Quick start: If you have the path inline:
- Very specific: line 65
Search for PRD, TRD, README, ROADMAP, SPEC, DESIGN files and read them.
- Very specific: line 70
Use the scan output to answer questions for each of the seven templates.
- Very specific: line 72
If the stack is ambiguous (multiple manifest files, unfamiliar file types, no package.json), load references/stack-detection.md.
- Very specific: line 86
Use [TODO] for anything that cannot be determined from code.
- Common: line 90
Run this mandatory validation loop before finalizing:
- Common: line 94
If any required section is missing or unsupported:
- Common: line 104
No empty required sections.
- Very specific: line 118
Generated/compiled output: Never document patterns from dist/, build/, generated/, .next/, out/, or __pycache__/.
- Very specific: line 122
devDependencies≠ production stack: Only dependencies (or equivalent, e.g. - Common: line 151
Use these sections during Phase 2 to inform investigation questions and identify tool-specific patterns.
- Common: line 173
Default mode: complete only the "Core Sections (Required)" in each template.
“Common” is measured: kept by at least 6 in 10 of the 3 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Acquire Codebase Knowledge
Produces seven populated documents in docs/codebase/ covering everything needed to work effectively on the project. Only document what is verifiable from files or terminal output — never infer or assume.
Output Contract (Required)
Before finishing, all of the following must be true:
- Exactly these files exist in
docs/codebase/:STACK.md,STRUCTURE.md,ARCHITECTURE.md,CONVENTIONS.md,INTEGRATIONS.md,TESTING.md,CONCERNS.md. - Every claim is traceable to source files, config, or terminal output.
- Unknowns are marked as
[TODO]; intent-dependent decisions are marked[ASK USER]. - Every document includes a short "evidence" list with concrete file paths.
- Final response includes numbered
[ASK USER]questions and intent-vs-reality divergences.
Workflow
Copy and track this checklist:
- [ ] Phase 1: Run scan, read intent documents
- [ ] Phase 2: Investigate each documentation area
- [ ] Phase 3: Populate all seven docs in docs/codebase/
- [ ] Phase 4: Validate docs, present findings, resolve all [ASK USER] itemsFocus Area Mode
If the user supplies a focus area (for example: "architecture only" or "testing and concerns"):
- Always run Phase 1 in full.
- Fully complete focus-area documents first.
- For non-focus documents not yet analyzed, keep required sections present and mark unknowns as
[TODO]. - Still run the Phase 4 validation loop on all seven documents before final output.
Phase 1: Scan and Read Intent
Run the scan script from the target project root:
python3 "$SKILL_ROOT/scripts/scan.py" --output docs/codebase/.codebase-scan.txtWhere
$SKILL_ROOTis the absolute path to the skill folder. Works on Windows, macOS, and Linux.Quick start: If you have the path inline:
python3 /absolute/path/to/skills/acquire-codebase-knowledge/scripts/scan.py --output docs/codebase/.codebase-scan.txt- Search for
PRD,TRD,README,ROADMAP,SPEC,DESIGNfiles and read them. - Summarise the stated project intent before reading any source code.
Phase 2: Investigate
Use the scan output to answer questions for each of the seven templates. Load references/inquiry-checkpoints.md for the full per-template question list.
If the stack is ambiguous (multiple manifest files, unfamiliar file types, no package.json), load references/stack-detection.md.
Phase 3: Populate Templates
Copy each template from assets/templates/ into docs/codebase/. Fill in this order:
- STACK.md — language, runtime, frameworks, all dependencies
- STRUCTURE.md — directory layout, entry points, key files
- ARCHITECTURE.md — layers, patterns, data flow
- CONVENTIONS.md — naming, formatting, error handling, imports
- INTEGRATIONS.md — external APIs, databases, auth, monitoring
- TESTING.md — frameworks, file organization, mocking strategy
- CONCERNS.md — tech debt, bugs, security risks, perf bottlenecks
Use [TODO] for anything that cannot be determined from code. Use [ASK USER] where the right answer requires team intent.
Phase 4: Validate, Repair, Verify
Run this mandatory validation loop before finalizing:
- Validate each doc against
references/inquiry-checkpoints.md. - For each non-trivial claim, confirm at least one evidence reference exists.
- If any required section is missing or unsupported:
- Fix the document.
- Re-run validation.
- Repeat until all seven docs pass.
Then present a summary of all seven documents, list every [ASK USER] item as a numbered question, and highlight any Intent vs. Reality divergences from Phase 1.
Validation pass criteria:
- No unsupported claims.
- No empty required sections.
- Unknowns use
[TODO]rather than assumptions. - Team-intent gaps are explicitly marked
[ASK USER].
Gotchas
Monorepos: Root package.json may have no source — check for workspaces, packages/, or apps/ directories. Each workspace may have independent dependencies and conventions. Map each sub-package separately.
Outdated README: README often describes intended architecture, not the current one. Cross-reference with actual file structure before treating any README claim as fact.
TypeScript path aliases: tsconfig.json paths config means imports like @/foo don't map directly to the filesystem. Map aliases to real paths before documenting structure.
Generated/compiled output: Never document patterns from dist/, build/, generated/, .next/, out/, or __pycache__/. These are artefacts — document source conventions only.
.env.example reveals required config: Secrets are never committed. Read .env.example, .env.template, or .env.sample to discover required environment variables.
devDependencies ≠ production stack: Only dependencies (or equivalent, e.g. [tool.poetry.dependencies]) runs in production. Document linters, formatters, and test frameworks separately as dev tooling.
Test TODOs ≠ production debt: TODOs inside test/, tests/, __tests__/, or spec/ are coverage gaps, not production technical debt. Separate them in CONCERNS.md.
High-churn files = fragile areas: Files appearing most in recent git history have the highest modification rate and likely hidden complexity. Always note them in CONCERNS.md.
Anti-Patterns
| ❌ Don't | ✅ Do instead |
| "Uses Clean Architecture with Domain/Data layers." (when no such directories exist) | State only what directory structure actually shows. |
"This is a Next.js project." (without checking package.json) | Check dependencies first. State what's actually there. |
Guess the database from a variable name like dbUrl | Check manifest for pg, mysql2, mongoose, prisma, etc. |
Document dist/ or build/ naming patterns as conventions | Source files only. |
Enhanced Scan Output Sections
The scan.py script now produce the following sections in addition to the original output:
- CODE METRICS — Total files, lines of code by language, largest files (complexity signals)
- CI/CD PIPELINES — Detected GitHub Actions, GitLab CI, Jenkins, CircleCI, etc.
- CONTAINERS & ORCHESTRATION — Docker, Docker Compose, Kubernetes, Vagrant configs
- SECURITY & COMPLIANCE — Snyk, Dependabot, SECURITY.md, SBOM, security policies
- PERFORMANCE & TESTING — Benchmark configs, profiling markers, load testing tools
Use these sections during Phase 2 to inform investigation questions and identify tool-specific patterns.
Bundled Assets
| Asset | When to load |
scripts/scan.py | Phase 1 — run first, before reading any code (Python 3.8+ required) |
| references/inquiry-checkpoints.md | Phase 2 — load for per-template investigation questions |
| references/stack-detection.md | Phase 2 — only if stack is ambiguous |
| assets/templates/STACK.md | Phase 3 step 1 |
| assets/templates/STRUCTURE.md | Phase 3 step 2 |
| assets/templates/ARCHITECTURE.md | Phase 3 step 3 |
| assets/templates/CONVENTIONS.md | Phase 3 step 4 |
| assets/templates/INTEGRATIONS.md | Phase 3 step 5 |
| assets/templates/TESTING.md | Phase 3 step 6 |
| assets/templates/CONCERNS.md | Phase 3 step 7 |
Template usage mode:
- Default mode: complete only the "Core Sections (Required)" in each template.
- Extended mode: add optional sections only when the repo complexity justifies them.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

