跳到主要内容
知仓学习社ZHICANG

sync-codebase

Build or update the reviewer base index (vector store + code graph) from a local repo clone. Use when the user asks to "index the codebase", "build …

读凭据严重 1 · 高危 0hashgraph-online/awesome-codex-plugins

它会碰到什么

扫了多少1 个文本文件,3 KB
它会碰到什么读凭据
命中总数1 处
命中统计严重 1 · 高 0 · 中 0 · 低 0
逐条看命中(1 条严重或高危)
  • 严重 SKILL.md:34cred-paths
    - The reviewer MCP server is reachable (run `reviewer check` or confirm the user has `.env`

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Sync Codebase

Builds or updates the reviewer base index — vector embeddings (Postgres/pgvector) and code graph

(Neo4j) — from a local repo clone using reviewer index. This is a one-time setup operation;

subsequent runs are incremental (only changed files are re-embedded).

Inputs

Parse from $ARGUMENTS (all optional):

  • --path <path>: path to the local repo clone. Default: current working directory.
  • --ref <branch>: git ref to index. Default: main.
  • --repo <owner/name>: repo identifier for multi-repo setups. If omitted, derived automatically

from git remote get-url origin.

  • --backend <auto|scip|treesitter>: graph backend override. Default: auto (SCIP if in PATH,

else tree-sitter).

Pipeline

  1. Resolve inputs. If --path not given, use the current working directory. If --ref not

given, use main. If --repo not given, run:

   git -C <path> remote get-url origin

Strip .git suffix, extract the last two path segments (owner/name).

  1. Check prerequisites. Verify:
  • uvx is available: uvx --version succeeds.
  • The path is a git repo: git -C <path> rev-parse --git-dir succeeds.
  • The reviewer MCP server is reachable (run reviewer check or confirm the user has .env

configured with PG_DSN, NEO4J_URI, VOYAGE_API_KEY).

  • Docker services are up if using the default stack: docker compose ps shows paradedb and

neo4j running.

  • Stop and tell the user what is missing if any check fails.
  1. Run indexing.
   uvx --from rag-reviewer reviewer index <path> --ref <ref>

Add --repo <owner/name> if resolved or provided. Stream the output to the user.

Expected duration: seconds for small repos, minutes for large ones — Voyage free tier

(3 RPM / 10K TPM) causes throttling with automatic retry/backoff. That is normal, not an error.

Use --limit N (if supported) for a quick smoke run.

  1. Verify. After indexing completes, optionally run a diagnostic search to confirm the corpus:
   uvx --from rag-reviewer reviewer search "your query here"

Or call search_code via the reviewer MCP tools directly.

  1. Report. Summarise the output: chunks indexed/updated, graph nodes/edges upserted, warnings

(e.g. "SCIP unavailable, fell back to tree-sitter"). If the SCIP backend was used, note that

IMPLEMENTS edges and full call-graph accuracy are available; if tree-sitter, only CALLS by

name are available.

Notes

  • This indexes the local clone on disk — not via GitHub API. The repo must be cloned locally

before running.

  • For accurate graph with IMPLEMENTS edges: install scip-python first:
  npm install -g @sourcegraph/scip-python

Then re-run — GRAPH_BACKEND=auto picks it up automatically.

  • After reviewer index, individual PR reviews (rag-reviewer:review-pr) trigger incremental

re-sync of changed files automatically via prepare_review. Full re-index is only needed when

the base branch diverges significantly or after a fresh deploy.

  • To sync tasks from the configured registered task board, use rag-reviewer:sync-tasks instead.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。