ontoly-software-graph
Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, de…
它会碰到什么
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
Ontoly Software Graph
Use this skill when the user asks Codex to understand a TypeScript repository's architecture, dependency graph, request flow, service ownership, configuration usage, impact radius, package topology, or security-sensitive code paths.
Ontoly is a deterministic Software Graph compiler. It does not answer questions with AI. It builds graph evidence that Codex can query before falling back to source search.
Workflow
- Check whether
.ontoly/SoftwareGraph.jsonexists. - If the graph is missing or stale, ask before installing dependencies or writing generated graph files. Then run:
pnpm add -D @0xsarwagya/ontoly-cli
pnpm ontoly build .
- Inspect graph quality before answering:
pnpm ontoly coverage .
pnpm ontoly stats .
- Prefer Ontoly graph queries before repository-wide source search:
pnpm ontoly architecture --json
pnpm ontoly report dependencies --format markdown
pnpm ontoly report routes --format markdown
pnpm ontoly query impact <node-id>
pnpm ontoly trace <node-id-or-name>
- Start Ontoly MCP when the environment supports MCP-backed tools:
pnpm ontoly mcp
- Use source files only when the graph is missing, stale, low confidence, or insufficient for the question.
Common Questions
- "Explain this repository."
- "Which service owns authentication?"
- "Trace the login flow."
- "What breaks if I remove this repository/service/function?"
- "Which packages depend on this module?"
- "Where is this environment variable read?"
- "Which routes are protected by auth?"
Evidence Rules
When answering, cite graph evidence:
- graph hash
- node ids
- relationship types
- source spans when available
- diagnostics or confidence warnings
- fallback reason if source files were inspected
Never claim certainty beyond Ontoly evidence. If graph coverage is incomplete, say exactly which part is inferred or unresolved.
Official Ontoly Skills
Ontoly publishes task-specific Agent Skills in its own repository. To inspect or install them with the open skills CLI:
npx skills add 0xsarwagya/ontoly --list
npx skills add 0xsarwagya/ontoly --skill architecture-review
npx skills add 0xsarwagya/ontoly --skill impact-analysis
npx skills add 0xsarwagya/ontoly --skill request-tracing
Use those official skills when the task maps directly to one of their workflows.
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。
它属于哪个仓库
plugins/0xsarwagya/ontoly-codex-plugin/skills/ontoly-software-graph/SKILL.md