Star200+

codebase-map

REVIEW · 66
Registry indexed

Where things live in the portal-tunnel repo (sdk/portal/types/utils/cmd/discovery/x402/frontend/extensions) and where new code belongs. Use when locating functionality or deciding where to add code.

Verified installs0
Stars263
Version1.0.0
Quality71/100 · Strong
Trust66/100 · Sandbox only
Audit80/100 · Needs review

Supply asset profile

Coding and developer agents

Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills.

Browse track

Scenario

Testing and QA

I need my agent to test a web app, reproduce bugs, and verify fixes.

Agent fit

Claude Code + Browser agents + CLI

Codex, Claude Code, Cursor, CLI, or custom agents.

Install

Ready

npx skills add gosuda/portal-tunnel --skill codebase-map

Maintenance

fresh

1d since push

Risk

Needs review

Dependency or permission surface needs review

GitHub quality

263

71/100 Quality · 74/100 Trust

Coverage tags

CodingTesting and QAcoding-agentsagent-skill

Review notes

Dependency or permission surface needs review · Permission surface may require sandboxing

Agent adoption scorecard

Trust, audit, and install readiness at a glance

These scores combine public repository metadata, OpenAgentSkill review signals, maintenance freshness, and install readiness. They are a shortlist signal, not a replacement for human review.

Quality

Strong
71

Solid option that is likely worth shortlisting for production workflows.

Trust

Sandbox only
66

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

Audit

Needs review
80

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

OpenAgentSkill Trust Score v5

Human review before install

Run only in a sandbox and compare close alternatives before using it for real work.

CodexClaude CodeCursorOpenAgentSkill CLI

Stars

263 GitHub stars

Repo activity

263 stars, 29 forks

Maintenance

1d since push

License

MIT

Install

npx skills add gosuda/portal-tunnel --skill codebase-map

Install safety

standard package or runtime install path

Permission surface

shell or command execution, filesystem or document access

Agent outcomes

No agent outcome data yet

Docs

Usable metadata, review docs

Risk summary

Review before production

  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • Stars/forks activity: 263 stars, 29 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, external package install surface

Install readiness

Install path available

  • Install path is available
  • Repository evidence is available
  • License is declared
  • No Agent Proven outcome evidence yet

Agent-readable metadata

Machine-readable decision data for this skill.

Use this block or the embedded JSON to decide whether an agent should install this skill, choose an alternative, or ask for human review first.

Open JSON

Suited tasks

  • Browser automation workflows
  • Claude Code teams
  • builders willing to evaluate younger projects
  • Navigate pages

Suited agents

CodexClaude CodeCursorOpenAgentSkill CLIBrowser agentsCLI

Install decision

Command
npx skills add gosuda/portal-tunnel --skill codebase-map
Policy
review
Human review
yes

Trust and risk

Trust
66/100
Audit
80/100
Risk level
Needs review

Outcome loop

Endpoint
/api/agent/outcome
Event ID
resolve
Outcomes
5

Install command

npx skills add gosuda/portal-tunnel --skill codebase-map
Public auditEval reportResolve APIInstall handoff

Do not use when

  • teams that need a vendor-supported SLA
  • high-compliance environments without internal security review
  • No OpenAgentSkill engagement data yet
  • High-risk permission hints: Shell or command execution
  • Dependency or permission surface needs review

Alternative

Code Review

168.6K Stars

npx skills add mattpocock/skills --skill code-review

Alternative

Grill With Docs

164.7K Stars

npx skills add mattpocock/skills --skill grill-with-docs

Alternative

To Spec

164.7K Stars

npx skills add mattpocock/skills --skill to-spec

Alternative

To Tickets

176.7K Stars

npx skills add mattpocock/skills --skill to-tickets

Agent safety v2

48/100 · Avoid automatic install

Experimentalreview

Sparse or mixed signals. Useful for discovery, but not for autonomous installation.

Test manually in an isolated workspace and compare against safer alternatives.

Resolve via API

high

Shell or command execution

Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.

medium

Browser automation

Skill may drive a browser or interact with web pages.

medium

Network access

Skill likely fetches remote pages, APIs, repositories, or external services.

medium

Filesystem access

Skill may read or write project files, documents, generated artifacts, or local workspace state.

  • High-risk permission hints: Shell or command execution
  • Dependency or permission surface needs review

Install targets

Install this skill in your agent workflow

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

skill install

OpenAgentSkill CLI

Resolve policy, run the source installer safely, and report a verified install receipt.

$ npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.2.1/openagentskill-0.2.1.tgz install gosuda-codebase-map

Agent resolve plan

Let an agent verify fit before installing.

The Resolve API returns the selected skill, alternatives, safety policy, audit notes, install target, and copy-paste prompt an agent can follow without scraping this page.

Open text plan

Open JSON

/api/agent/resolve?task=Use%20codebase-map%20for%20an%20agent%20workflow&agent=codex&max_risk=medium

Resolve text

/api/agent/resolve?task=Use%20codebase-map%20for%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text

Install handoff

/api/skills/gosuda-codebase-map/install

Agent should check

  • Task fit and alternatives from Resolve API.
  • Audit score, trust score, and safety policy warnings.
  • Install target compatibility for Codex, Claude Code, Cursor, or CLI.

Copy prompt

Task: Use codebase-map in this workspace.
Resolve first: https://www.openagentskill.com/api/agent/resolve?task=Use%20codebase-map%20for%20an%20agent%20workflow&agent=codex&max_risk=medium
Review install handoff: https://www.openagentskill.com/api/skills/gosuda-codebase-map/install
Install command: npx skills add gosuda/portal-tunnel --skill codebase-map
Before running it, summarize audit warnings, required permissions, and the fallback skill if install is risky.

Agent handoff

Give an agent the install path, not another directory page.

Use the public install endpoint to fetch the command, safety checklist, target prompts, and canonical links for this skill.

Open install API

Install handoff

/api/skills/gosuda-codebase-map/install

LLM text format

/api/skills/gosuda-codebase-map/install?format=text

Find alternatives

/api/skills/search?q=codebase-map&limit=3

Agent prompt

Use codebase-map for this task. Review https://www.openagentskill.com/api/skills/gosuda-codebase-map/install, then install with: npx skills add gosuda/portal-tunnel --skill codebase-map

Registry metadata

Agent-readable profile for automatic skill selection.

This page exposes the same decision, trust, audit, use-case, and install signals through the Registry API, so agents can rank this skill without scraping the UI.

Open manifest

Manifest

/api/registry/manifest/gosuda-codebase-map

LLM text

/api/registry/manifest/gosuda-codebase-map?format=text

Install alias

/api/registry/install/gosuda-codebase-map

Recommend

/api/registry/recommend?task=Use%20codebase-map%20in%20an%20agent%20workflow&limit=3

Agent fit

70/100

Browser automation

Use-case tags

Browser automationTesting and QALocal desktop

Platforms

Claude Code, Browser agents

Audit report

Needs review · 80/100

A machine-readable review of install readiness, security metadata, maintenance, and adoption risk.

View audit reportView eval report

Agent decision cockpit

Fallback candidate for Browser automation

Prototype with this skill first; keep a fallback candidate ready.

70
Readiness
Prototype
Stage

Role in stack

Fallback candidate

Primary fit

Browser automation

Trust label

Prototype first

Install path

Command ready

Use when

  • Browser automation workflows
  • Claude Code teams
  • builders willing to evaluate younger projects

Evidence

  • recent repository activity
  • install command or GitHub repo available
  • 71/100 quality profile

review first

  • No OpenAgentSkill engagement data yet

Implementation path

  1. 1Install it in a sandbox agent and run one Browser automation task end to end.
  2. 2Compare output quality, latency, and failure behavior against at least one alternative.
  3. 3Promote it into production only after reviewing repository permissions, license, and maintenance signals.

Trust profile

Sandbox only

Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.

66
OpenAgentSkill Trust Score

GitHub adoption

INFO

263 GitHub stars

Stars/forks activity

CHECK

263 stars, 29 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

1d since push

License clarity

PASS

MIT

Good signals

  • AI review approved
  • Install path is available
  • Repository evidence is available
  • Recently maintained repository
  • Install command has no obvious high-risk pattern
  • Outcome loop is ready but needs first real agent run

Review before install

  • Quality score needs review
  • Permission surface needs review: shell or command execution, filesystem or document access
  • Stars/forks activity: 263 stars, 29 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, external package install surface
  • Permission surface: shell or command execution, filesystem or document access
  • No real agent outcome reports yet
  • Human review required before unattended installation

Recommended action

Run only in a sandbox and compare close alternatives before using it for real work.

Quality profile

Strong candidate for agent workflows

Solid option that is likely worth shortlisting for production workflows.

71
GitHub stars
263
Freshness
1d ago
Install ready
Yes
License
MIT

Workflow fit

Use this skill in these scenarios

Operate web apps

Browser automation

I need my agent to control a browser, fill forms, and verify web app workflows.

Verify behavior

Testing and QA

I need my agent to test a web app, reproduce bugs, and verify fixes.

Operate local tools

Local desktop

I need my agent to operate local files and desktop apps in a repeatable workflow.

Workflow fit

Add it to a complete workflow

Operate and verify web apps

Browser QA agent

A workflow for agents that navigate products, fill forms, take screenshots, and verify real user flows across web applications.

Design, build, test, and ship interfaces

Frontend and UI

A practical workflow for agents that turn product briefs or Figma designs into polished frontend code, review the result, test it in a browser, and prepare a safe deployment.

Scrape, clean, and reuse web data

Web data pipeline

A practical workflow for agents that crawl public pages, extract clean content, normalize data, and hand it to downstream research or RAG workflows.

Alternative shortlist

Compare before you install

Similar skills that may fit this task.

Compare all

Code Review

Review a branch or diff against repository standards and the originating spec in two independent analysis passes.

Adopt
Ready100
Quality100
Stars168.6K

Grill With Docs

A relentless interview that pressure-tests a plan against the codebase, sharpens domain language, and updates CONTEXT.md and ADRs when decisions become durable.

Adopt
Ready100
Quality100
Stars164.7K

To Spec

Turn the current conversation and codebase context into a structured implementation spec, then publish it to the configured project issue tracker.

Adopt
Ready100
Quality100
Stars164.7K

To Tickets

Break a plan, spec, or conversation into independently actionable tracer-bullet tickets with explicit blocking relationships.

Adopt
Ready100
Quality100
Stars176.7K

Overview

--- name: codebase-map description: Where things live in the portal-tunnel repo (sdk/portal/types/utils/cmd/discovery/x402/frontend/extensions) and where new code belongs. Use when locating functionality or deciding where to add code. ---

# portal-tunnel codebase map

Portal is a zero-knowledge tunneling relay + local runtime: exposes local HTTP/TCP/UDP services through self-hosted or public relays with end-to-end tenant TLS, ECH SNI hiding, MITM self-probe, multi-hop routing, and x402 payments.

## Top-level packages - `sdk/` — **client side**. Tunnel exposure and relay API client, listener/session management, HTTP routing + proxying, MITM detection. Entry points: `sdk/expose.go`, `sdk/listener.go`, `sdk/http.go`, `sdk/proxy.go`, `sdk/mitm.go`. x402 route protection is applied here (`sdk/http.go`). - `portal/` — **relay side**. API/server lifecycle (`portal/api_server.go`, `portal/server.go`), leases, proxying, identity, keyless TLS/ECH, overlay transports, policy, telemetry, ACME. - `portal/discovery/` — relay gossip: `announce.go` (rate limiting), `refresher.go` (poll descriptors + `POST /discovery/announce` self-announce + peer refresh), `relayset.go` (validated pool, bans, route-planning state), `relaystate.go`, `mols.go` (route scoring). - `portal/x402/` — payment gating: `handler.go`, `payment.go`, `casper.go`, `x402.go`, embedded browser `client.js`. Facilitator mounts at `/api/x402` only when `X402_ENABLED`. - `types/` — **shared contracts**: protocol/API/data models, identity & transport types, x402 types, and public path constants (`types/paths.go`). `types/types.go` unmarshals the embedded `config.toml`/`registry.json`. Put shared constants and public path strings HERE. - `utils/` — shared **stateless** helpers: API encoding, command dispatch (`utils/cmd.go`), files, paths, HTTP, name/network/TLS normalization, snapshots. - `cmd/` — executables: `cmd/portal-tunnel` (client CLI), `cmd/relay-server` (relay + embedded SPA), `cmd/portal-loadtest` (`make load-test`), plus demo/payment apps. - `frontend/` — React + Tailwind SPA (Vite). Built and embedded into the relay binary at `cmd/relay-server/dist/app` (`//go:embed dist/*`). Dev server at `http://localhost:5173`; point at a live relay with `VITE_PORTAL_API_BASE_URL`. - `docs/` — SvelteKit docs site (`make build-docs`, uses bun). - `extensions/vscode/` — VS Code extension (start/stop tunnel commands, relay/host/name settings).

## Root files - `config.toml` — embedded release version + protocol versions (via `manifest.go`). - `registry.json` — embedded default public relay list → `types.BootstrapRelays`. - `manifest.go` — `//go:embed` of the two files above. - `docker-compose.yml` / `Dockerfile` — relay container build/deploy.

## Where new code belongs (AGENTS.md) - Shared contract / constant / public path → `types/` (one owner, no duplication). - Stateless transform reused across packages → `utils/`. - Stateful/domain logic → its real owner in `sdk/` or `portal/` (resolve complexity in the lowest coherent owner, expose minimum surface). - Avoid speculative abstraction, wrappers with no boundary, and dead fields; remove stale code while nearby.

Technical details

Version
1.0.0
License
MIT
Last updated
Aug 22, 2026
Published
Aug 22, 2026

Decision snapshot

Fallback candidate

70
Ready
Prototype
Stage

recent repository activity

Audit

Install review

Install and adoption review

80
Needs review
Security
79/100
Maintenance
100/100
Install
92/100
Open full auditView eval report

Agent-proven evidence

Agent-proven evidence

Outcome reports after resolve, review, install, and one narrow run.

0
Proven
Needs first agent runAuto-install: review firstLast: Unknown
Success rate
—
Recent failure
—
Outcomes
0
Output quality
—
Failed
0
Not relevant
0
Installs
0
Risk blocked
0
Setup needed
0
Production
0

No agent outcome data yet. The first agent run can report success, setup needs, risk blocks, failure, or not-relevant through /api/agent/outcome.

Agent-Proven rankingOutcome contract

Install

Add to agent workflow

Free and open source. Review the report before installing into production agents.

Compare AlternativesAuto-resolve PlanView on GitHubDocumentation

Growth loop

Share kit

X

Scenario-led draft for codebase-map, ready for a manual X post.

Curator note
codebase-map: Where things live in the portal-tunnel repo (sdk/portal/types/utils/cmd/discovery/x402/fronte...

263 stars

https://www.openagentskill.com/skills/gosuda-codebase-map?ref=x
Open X draft
Optional reply with install command
Listing + install path for codebase-map:
https://www.openagentskill.com/skills/gosuda-codebase-map?ref=x

Install: npx skills add gosuda/portal-tunnel --skill codebase-map
Open reply draft

Listing source

Registry indexed

Claimable

This listing was indexed from public sources and is not marked official until a maintainer claim is approved.

Creator
gosuda
Indexed by
OpenAgentSkill community index

Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals.

Claim this skill

Owner claim

Claim this skill listing

This Registry indexed listing is attributed to gosuda but is not marked official yet. Claim it to add a verified owner signal and make future launch, install, and audit updates easier to trust.

Creator backlink kit

Add the evidence badges to your README

Show the canonical listing, current trust and audit signals, and real Agent-Proven evidence where developers evaluate the repository.

[![Listed on OpenAgentSkill](https://www.openagentskill.com/api/badge/gosuda-codebase-map?metric=listed&label=Listed)](https://www.openagentskill.com/skills/gosuda-codebase-map)
[![OpenAgentSkill Trust](https://www.openagentskill.com/api/badge/gosuda-codebase-map?metric=trust&label=Trust)](https://www.openagentskill.com/skills/gosuda-codebase-map)
[![OpenAgentSkill Audit](https://www.openagentskill.com/api/badge/gosuda-codebase-map?metric=audit&label=Audit)](https://www.openagentskill.com/skills/gosuda-codebase-map/audit)
[![Agent Proven](https://www.openagentskill.com/api/badge/gosuda-codebase-map?metric=proven&label=Agent%20Proven)](https://www.openagentskill.com/skills/gosuda-codebase-map)
Preview badge Open audit Creator kit

Author

G

gosuda

@gosuda

Tags

agent-skill

Platform fit

Claude CodeBrowser agents

Health signals

GitHub stars
263
Quality score
41/100
Last GitHub push
Aug 22, 2026
Framework hints
Unknown
OpenAgentSkill views
0
Install copies
0
Outbound clicks
0

Community signal

Share whether this skill looks useful for your agent workflow. Aggregated feedback improves rankings over time.

Trust & safety

Sandbox only

66
  • GitHub adoption263 GitHub starsINFO
  • Stars/forks activity263 stars, 29 forks; issue activity unavailable in current metadataCHECK
  • Recent maintenance1d since pushPASS
  • License clarityMITPASS
  • README/SKILL.md completenessPublic metadata needs stronger README/SKILL.md contextINFO
  • Dependency/runtime riskcommand execution surface, external package install surfaceCHECK

Related skills

Code Review

Review a branch or diff against repository standards and the originating spec in two independent analysis passes.

168.6K Stars

Grill With Docs

A relentless interview that pressure-tests a plan against the codebase, sharpens domain language, and updates CONTEXT.md and ADRs when decisions become durable.

164.7K Stars

To Spec

Turn the current conversation and codebase context into a structured implementation spec, then publish it to the configured project issue tracker.

164.7K Stars

To Tickets

Break a plan, spec, or conversation into independently actionable tracer-bullet tickets with explicit blocking relationships.

176.7K Stars
InstallView on GitHub