dev-context — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dev-context (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use repoctx to generate concrete repository context for agents and reviewers before editing, reviewing, or planning work. Prefer its structured output over guessing repo scripts, routes, file kinds, or cross-repo contracts.
The legacy dev-context command remains available as an alias.
The canonical skill source is backed by this repository at:
codex/skills/dev-contextIf the repo is missing, restore it from:
git clone https://github.com/nugehs/repoctx /path/to/repoctxIf the installed skill is missing or stale, run this from a repoctx checkout:
codex/skills/dev-context/scripts/sync-installed.sh.dev-context/ when a human or long-running agent needs a durable report.workspace instead of inspecting each repo in isolation.pr with an explicit base when possible.repoctx is unavailable as a command, run node /path/to/repoctx/src/cli.js ....From the tool repo:
node src/cli.js help
node src/cli.js install
node src/cli.js i
node src/cli.js doctor
node src/cli.js repo /path/to/repo --json
node src/cli.js discover /path/to/workspace --depth 2 --json
node src/cli.js index /path/to/workspace --discover
node src/cli.js catalog --json
node src/cli.js search "events controller" --json
node src/cli.js context "add a new MCP tool" --path /path/to/repo --json
node src/cli.js map /path/to/repo --json
node src/cli.js harness /path/to/repo --out /path/to/repo/.dev-context/harness.md
node src/cli.js workspace /path/to/web /path/to/api --out .dev-context/workspace.md
node src/cli.js pr /path/to/repo --base origin/main --out /path/to/repo/.dev-context/pr-review.md
node src/cli.js report /path/to/repo --out /path/to/repo/.dev-context/report.md
node src/cli.js init /path/to/repo
node src/cli.js mcpIf installed as a package, the same commands can use repoctx instead of node src/cli.js.
Optional external tools:
npm install -g opensrc code-structureUse these only when dependency-source lookup or TypeScript structure HTML is needed:
node src/cli.js deps zod --query parse --limit 20
node src/cli.js structure /path/to/repo --pattern "app/**/*.tsx" --out .dev-context/structure.htmlRun:
node /path/to/repoctx/src/cli.js mcpMCP tools exposed by the server:
repo_inspect: repository shape, scripts, package managers, entrypoints, git metadatarepo_map: compact JSON code map with optional domain and kind filtersrepo_discover: local repository discovery under workspace rootsrepo_index: local .dev-context/index.json generation and catalog registrationrepo_catalog: local catalog listingrepo_search: local catalog search across paths, domains, routes, imports, exports, and symbolscontext_pack: task-aware local context packet with primary files, related files, tests, patterns, validation commands, and source evidencerepo_harness: setup, validation, runtime, and context commandsworkspace_report: product-level context across multiple repospr_review: diff-aware PR review context and optional GitHub comment supportfind_domain: domain files across one or more reposfind_file_kind: route, controller, service, component, hook, api client, DTO, schema, test, or source filesfind_backend_route: Nest controller route lookupfind_frontend_api_client: frontend API client lookup by domain or queryrepoctx can discover them..dev-context/ for generated reports in target repos; avoid mixing generated context into source directories.When editing this repo, run:
npm run ci
npm test
npm run smokeIf CLI commands, MCP tools, or package scripts change, update this skill and its evals before syncing the installed copy.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.