| name | repository-context |
| description | Scan and analyze repository structure to identify languages, frameworks, IaC, CI/CD pipelines, and credentials. |
Repository Context Collector Skill
This skill allows the agent to analyze a workspace or repository and gather critical architecture signals needed to customize security logging recommendations.
Trigger Instructions
Run this skill during the initial stage of workspace analysis.
Core Capabilities
- Deterministic Scan: Invoke
scripts/collect-repository-context.py to examine files in the workspace.
- Metadata Discovery: Parse configuration manifests and package descriptors to identify:
- Languages and frameworks (e.g., Node.js, Python, Go, Java)
- Datastores (e.g., PostgreSQL, MongoDB, Redis)
- Cloud providers (AWS, GCP, Azure) via IaC and configuration files
- Identity & Authentication systems (JWT, OAuth, Keycloak, Auth0)
- CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins)
- Data Classification: Identify sensitive entrypoints, public endpoints, and data flows to map data zones.
- Secrets Detection: Check for credential patterns (e.g., API keys, passwords, database URLs). Report locations for technology context, but never copy or display the secret value.
Output Generation
Save the output of this scan as a JSON/markdown payload matching the schema defined in assets/repository-context.md.
