codebase-documenter

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
9
Flagged
9
Chunks
17
Flagged Files (9)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: codebase-documenter description: This skill should be used when writing documentation for codebases, including README files, architecture documentation, code comments, and API documentation.

Tool: SKILL.md [2/2] Description: real code from the project 3.

assets/templates/API.template.mdHIGH
78.3%

Malicious tool definition detected

Tool: assets/templates/API.template.md [1/2] Description: # API Documentation ## Overview This document provides comprehensive documentation for all API endpoints in [Project Name].

Tool: assets/templates/API.template.md [2/2]

assets/templates/ARCHITECTURE.template.mdHIGH
78.3%

Malicious tool definition detected

Tool: assets/templates/ARCHITECTURE.template.md [1/2] Description: # Architecture Overview ## What This Document Covers This document explains the high-level architecture of [Project Name], including how different components interact, key design decisions, and where to make common changes.

Tool: assets/templates/ARCHITECTURE.template.md [2/2] Description: **Pros:** [What we gained] - ❌ **Cons:** [What we sacrificed] **Alternatives considered:** - [Alternative 1]: Rejected because [reason] - [Alternative 2]: Rejected because [reason] ## Module Dependencies ### Dependency Graph ``` pages/ └─→ components/ └─→ hooks/ └─→ services/ └─→ utils/ store/ └─→ services/ └─→ utils/ ``` **Dependency rules:** 1.

assets/templates/CODE_COMMENTS.template.mdHIGH
78.3%

Malicious tool definition detected

Tool: assets/templates/CODE_COMMENTS.template.md [1/3] Description: # Code Comments Guide This document provides examples and patterns for writing effective inline documentation that helps new developers understand code quickly.

Tool: assets/templates/CODE_COMMENTS.template.md [2/3] Description: null = null; private user: User | null = null; /** * Authenticates a user with email and password.

Tool: assets/templates/CODE_COMMENTS.template.md [3/3]

assets/templates/README.template.mdHIGH
78.3%

Malicious tool definition detected

Tool: assets/templates/README.template.md Description: # [Project Name] ## What This Does [Write 1-2 sentences explaining what this project does in plain English.

index.jsHIGH
78.3%

Malicious tool definition detected

Tool: index.js Description: export default async function codebase_documenter(input) { console.log("🧠 Running skill: codebase-documenter"); // TODO: implement actual logic for this skill

package.jsonHIGH
78.3%

Malicious tool definition detected

Tool: package.json Description: { "name": "@ai-labs-claude-skills/codebase-documenter", "version": "1.0.0", "description": "Claude AI skill: codebase-documenter", "main": "index.js",

references/documentation_guidelines.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/documentation_guidelines.md [1/2] Description: # Documentation Guidelines This reference provides comprehensive best practices and style guidelines for creating high-quality documentation.

Tool: references/documentation_guidelines.md [2/2] Description: Low | Medium | | Best for | Large projects | Prototypes | Medium projects | ## Accessibility ### Write for Screen Readers - Use semantic markdown headings (`#`, `##`, `###`) - Provide alt text for images: `![Diagram showing data flow](diagram.png)` - Use descriptive link text: ✅ "Read the API documentation" vs ❌ "Click here" ### Support Multiple Learning Styles Provide information in multiple formats: 1. **Visual:** Diagrams, screen

references/visual_aids_guide.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/visual_aids_guide.md [1/3] Description: # Visual Aids Guide This guide provides patterns and techniques for creating effective visual aids in documentation, including diagrams, file trees, and flowcharts.

Tool: references/visual_aids_guide.md [2/3] Description: ``` ## Database Schema Diagrams ### Entity Relationship Show table relationships: ``` ┌──────────────┐ ┌──────────────┐ │ users │ │ posts │ ├──────────────┤ ├──────────────┤ │ id (PK) │────┐ │ id (PK) │ │ email │ │ │ user_id (FK) │────┐ │ name │ └───►│ title │ │ │ created_at │ │ content │ │ └──────────────┘ │ created_at │ │ └──────────────┘ │ │ ┌──────────────┐ │ │ comments │ │ ├──────────────┤ │ │ id (PK) │ │ │ post_id (FK) │◄───┘ │ user_

Tool: references/visual_aids_guide.md [3/3] Description: platforms support it **When to use:** When your documentation platform supports Mermaid ### Draw.io / Lucidchart (Visual Tools) **Pros:** - Professional appearance - Easy to create complex diagrams - Many templates available **Cons:** - Binary files (not version control friendly) - Requires separate tool - Can become outdated **When to use:** For complex diagrams or presentations ## Examples from Real Projects ### React Component Hierarchy

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
9
Chunks Analyzed
17
Analyzed
Feb 22, 2026, 01:39 PM
Security Audit — runlayer — codebase-documenter