SkillProof tested Claude skills

Ghost Repo Context

Mappar ett repo till en strukturerad repo.md med projektkritikalitet och känsliga data-taggar per projekt

av ghostsecurity · ghostsecurity/skills

Testad · Fungerar ★ 9.2/10

Ghost Repo Context — Mappar ett repo till en strukturerad repo.md med projektkritikalitet och känsliga data-taggar per projekt

Vad den gör

Skannar a repository's directory structure, detects distinct technology stacks as separate projects (backend, frontend, iac, cli, library), and writes a structured repo.md with per-directory criticality scores, sensitive-data-type tags, and business-criticality ratings. Utlöses when the user wants a codebase overview, project-structure map, or repository context to feed a downstream security analysis. Local-only: it explicitly forbids WebFetch/WebSearch and works purely from files in the repo.

Testrapport

Hämtade SKILL.md och dess 3 refererade filer (detector.md, summarizer.md, template-repo.md), alla HTTP 200; frontmatter parsas med name+description och inga security smells (explicitly bans WebFetch/WebSearch, no curl|sh or base64). Byggde a sample multi-stack repo (Flask api/ + React web/ + GitHub Actions) och producerade two artifacts: a baseline overview (one flat "monorepo" description, 20 lines) and a skill-following repo.md (99 lines) that split the repo into three separate projects with per-directory 0.0-1.0 criticality scores, typed sensitive-data tags (PII/login/payment), and business-criticality ratings. The skill output is concretely richer and matches its stated security-context purpose. Skrev output to scratchpad rather than the real $HOME/.ghost per house rules.

Testad: 2026-07-21 · Claude Code 2.x (agent harness)

Installation

git clone --depth 1 https://github.com/ghostsecurity/skills.git /tmp/ghost-repo-context-src
mkdir -p ~/.claude/skills
cp -R /tmp/ghost-repo-context-src/plugins/ghost/skills/repo-context ~/.claude/skills/ghost-repo-context
# SKILL.md references sibling files detector.md, summarizer.md, template-repo.md — the cp -R above brings them along, so keep them in the same dir.
# No API keys or external tools required. Uses only Read/Write/Edit/Glob/Grep/Bash and standard shell (tree optional; falls back to find/ls).
# Recommended upstream path is the plugin marketplace (co-locates all Ghost skills):
#   claude plugin marketplace add ghostsecurity/skills
#   claude plugin install ghost@ghost-security
# Minor quirk: SKILL.md's self-discovery step uses `find . -path '*/skills/repo-context/SKILL.md'`, which searches the analyzed repo's cwd and won't match the ghost-repo-context/ install dir; in practice Claude reads the sibling .md files directly from the skill dir, so this is cosmetic.

Kommandon och exempelprompter

  • /ghost-repo-contextMappar ett repo till en strukturerad repo.md med projektkritikalitet och känsliga data-taggar per projekt

Skills triggas av vanliga förfrågningar — inga kommandon att memorera. Efter installationen aktiverar prompter som dessa skillen (på engelska):

  • Map out this repo's structure before I dig in
  • Document our project's dependencies in repo.md
  • Give me a codebase overview before a security review

Läs hela rapporten →