code-mapper-skill

The mapper combines:

• Grimp: module imports, transitive blast radius, and cycles.
• Jedi: references for a requested function or class.
• AST scanner: files, tables, models, configuration, HTTP, events, processes, and CodeQL trigger evidence.
• Contract parsers: OpenAPI/Swagger, AsyncAPI, GraphQL, Protobuf, JSON Schema, Avro, Pact, and Backstage.
• OpenLineage-compatible output: static input/output datasets.
• CodeQL: targeted local value flow and local taint flow when policy selects it.

Analyze the target repository statically. Do not import or execute target modules. Never install dependencies, clone or refresh repositories, download CodeQL packs, or select a persistent cache location automatically.

Require an explicit work root. Use the active session's .codex-bootstrap\code-mapper for Codex or .claude-bootstrap\code-mapper for Claude Code. Keep every report, parser cache, and optional CodeQL artifact below that root. Use a local target path from the harness-approved Git workflow; refuse Git URLs.

Command