code-kg
Builds and queries a SQLite+FTS5 knowledge graph over any codebase - import/dependency edges, symbols with line ranges, entry points,…
Examining code for the line that is wrong
What it does
X-ray a codebase once, then answer from the graph instead of grepping. One stdlib engine: EXECUTE scripts/code_kg.py via Bash for every operation - never reimplement its parsing inline. Storage is <repo>/.code-kg/ (config.json + a rebuildable, gitignored db). Every read command re-ingests on drift, so answers track the live tree without you managing freshness.
What it can touch
Includes 187 scripts
Your AI can run these when the skill is used — on your computer in a coding tool (which asks first unless you have told it not to), or in the AI’s own sandbox in Claude and ChatGPT.
How we know
Found in the skill’s folder: scripts/code_kg.py, tests/fixture-deps/app.py, tests/fixture-deps/index.js, tests/fixture-django/config/__init__.py….
3 smaller things worth knowing
Refers to a credentials file (SSH keys, cloud logins, tokens); Contacts a server by raw IP address. Usually legitimate — listed so nothing is hidden.
How we know
Refers to a credentials file (SSH keys, cloud logins, tokens) — tests/fixture-relay/src/relay/tools/web_tool.py line 16; Refers to a credentials file (SSH keys, cloud logins, tokens) — tests/fixture-relay/tests/test_tools.py line 24; Contacts a server by raw IP address — tests/fixture-relay/tests/test_tools.py line 24. Read 2026-10-05, commit be3eeb4.
tests/fixture-relay/src/relay/tools/web_tool.py, line 16 ↗tests/fixture-relay/tests/test_tools.py, line 24 ↗tests/fixture-relay/tests/test_tools.py, line 24 ↗No serious risk pattern found
Launch7’s automated check read all 248 text files in this skill and matched none of its serious risk patterns. This is not a guarantee: a check like this can miss new or disguised tricks, and the author can change the files after the check.
How we know
Read 2026-10-05, commit be3eeb4 by pipeline/trust/analyze.py — 40+ patterns for hidden text, prompt injection, downloads that run, credential access and more. It reads; it never runs the skill.
Recently maintained
Its repository has had changes recently.
How we know
Last push to thefilesareinthecomputer/dotagents: 2026-10-04 (1 days before the scan).
Read automatically from the skill’s own files on GitHub on 5 Oct 2026. Launch7 does not run or manually review skills: this lists what the check saw, and nothing here means “safe”. How we check
Add it to your AI
Partly. Upload it in Claude’s settings — the instructions work; the scripts need the full folder.
Built in your browser from the SKILL.md on GitHub — nothing passes through Launch7.
In Claude, open Customize → Skills, press +, then Create skill → Upload a skill, and choose the .zip.
Make sure code execution is switched on (Settings → Capabilities). Skills need it.
Start a new chat and ask for the job in your own words — Claude picks the skill up when it fits.
This skill ships 187 scripts beside its instructions. The download here is the SKILL.md alone — enough for the instructions, not for the parts that run code. Use the command route, or take the full folder from the repository.
How Claude does this: support.claude.com · checked 28 Sep 2026 · “Supported” means documented by the vendor; Launch7 has not run it end to end
More from thefilesareinthecomputer
All from this publisher →- ai-slop-magic-eraser
Strips the tells of machine-generated writing while preserving meaning exactly, then corrects errors, hallucinations, contradictions and inventions.
- frontend-aesthetics
Raises the visual quality of agent-generated UI so it stops reading as AI slop, and audits existing UI against a catalog of tells.
- obsidian-kg
Builds and queries a SQLite+FTS5 knowledge graph over any markdown corpus - an Obsidian vault, a docs tree, a knowledge base - addressing sections rather…
- sprint-board
Plans, writes and audits agile backlogs as markdown - epics, features and user stories - against a fixed template, with a scaffolder and a linter.
