- Home
- Skills
- Prompt & Skill Engineering
- Codebase Briefing — Rules, Contracts And Traps
Works with the AI Agents you already use
Codebase Briefing — Rules, Contracts And Traps
Generates a verified briefing pack covering module maps, house rules, and structural traps for coding agents.
$12
Codebase Briefing — Rules, Contracts And Traps
Example session with this skill installed
Analyze the current repository and generate a full briefing pack for a new agent who needs to work on the authentication module.
- Read your context and instructions
- Compiled the codebase briefing
I have analyzed the repository. The briefing pack covers the core structure, the auth module contracts, and the detected house rules for TypeScript development.
Codebase Briefing: Authentication Module
Executive Summary
This repository is a TypeScript monorepo using pnpm. The authentication logic is centralized in packages/auth, but multiple layering violations exist between the core logic and the transport layer.
The Map
packages/auth/src/index.ts: Primary entry point for the module.packages/auth/src/providers/: Directory containing external OAuth adapters.packages/core/: Consumes auth types; do not introduce circular imports here.
The House Rules
- Naming: Interface names must not be prefixed with
I(Confidence: 100%, 42/42 instances). - Style: Use functional components for all React views in
packages/auth/ui(Confidence: 92%). - Safety: All new auth methods must include an
AuditLogcall as perdocs/security-policy.md.
The Decisions
- ADR-004 (Explicit): Use Zod for all runtime validation. No manual type guards.
- Inferred Decision: The team is migrating from Jest to Vitest (70% of tests are
.test.ts).
The Contracts
| Export | Purpose | Notes |
|---|---|---|
AuthSession | Core session interface | Exported from src/types.ts |
validateToken | Main validation logic | Used by middleware/ |
The Traps
Circular Dependency: auth/src/providers/google.ts currently imports from auth/src/service.ts, creating a cycle.
- Layering Violation: Direct DB imports found in
src/ui/login-form.tsx. Do not repeat this.
The Commands
- Build:
pnpm run build --filter @repo/auth - Test:
pnpm run test --filter @repo/auth - Lint:
pnpm run lint
Next steps
- Review
docs/adr/004-validation.mdbefore editing the login schema. - Run
pnpm run testimmediately after modifyingvalidateTokento verify the public contract. - Address the existing circular dependency in the Google provider if refactoring.
Connects securely to your tools. The creator never sees your data.
About this skill
Coding agents often cause damage by guessing how a repository works. They lack context on where modules live, what the house coding style is, and which structural traps to avoid. This skill prevents expensive mistakes by generating a verified briefing pack that informs an agent before it writes a single line of code.
What it does
- Module Mapping generates a high-level view of entry points and package boundaries to prevent misplaced logic.
- Convention Detection identifies actual house rules for naming and structure, backed by repository evidence.
- Decision Tracking extracts explicit architecture decisions (ADRs) so agents don't ignore established technical choices.
- Contract Analysis surfaces public APIs and exports to ensure changes don't break downstream dependencies.
- Trap Identification warns about circular dependencies and layering violations that an agent might otherwise trigger.
- Command Discovery lists the exact build, test, and lint scripts required for the specific stack.
How it works
- Frame the scope by defining if the briefing covers the whole repository, a specific directory, or a single file for validation.
- Collect repository state by reading
README.md,CONTRIBUTING.md, and architectural docs while preserving existing git changes. - Execute analysis using
agent-contextor manual inspection to extract the module map, detected rules, and structural diagnostics. - Assemble the briefing into a structured document that separates human-written rules from tool-inferred heuristics.
Frameworks & tools
This skill is stack-agnostic but optimized for repositories using git. It utilizes the ai-agent-context CLI for deep structural analysis and degrades to standard shell commands like find and grep when specialized tools are unavailable.
Why this beats prompting it yourself
Generic prompts result in agents hallucinating file paths or making assumptions based on public boilerplate rather than your team's specific practices. This skill enforces a read-only analysis contract that extracts evidence-based rules, ensuring the agent operates on facts instead of guesses.
Use cases
- Agent Onboarding to prepare an AI for work in a large, unfamiliar monorepo.
- Rule Verification to check if a proposed file or PR follows existing house conventions.
- Pre-flight Audits to identify architectural traps before starting a complex refactor.
- Legacy Knowledge Recovery to surface forgotten ADRs and public API boundaries.
Known limitations
Read-only analysis that never writes or modifies code. Heuristic confidence varies; explicit documentation always outranks tool inference. Analysis depth is limited by the moduleDepth configuration.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scanned
Verified clean today
- Passed all security checks, Safe to install
Requires