Borrowing it
Nothing to install: this file belongs to philngt/contextd. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/philngt/contextd/main/.claude/commands/code-analyze.mdgit clone --depth 1 https://github.com/philngt/contextdWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/philngt/contextd/code-analyze)<a href="https://agentmods.dev/commands/philngt/contextd/code-analyze"><img src="https://agentmods.dev/badge/commands/philngt/contextd/code-analyze/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/philngt/contextd/code-analyze"><img src="https://agentmods.dev/badge/commands/philngt/contextd/code-analyze.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.06159 |
| Opus 5.5 | $0.00000 | $0.02464 |
| Sonnet 5.5 | $0.00000 | $0.01232 |
| Haiku 4.5 | $0.00000 | $0.00616 |
Grade A, and why
code-analyze scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 392 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Code Analyze
Phân tích codebase có sẵn → snapshot metadata → đẩy vào evidence pipeline để đề xuất bổ sung platform patterns, platform contracts, project services, và decision (ADR) drafts cho workspace active.
Entry point user-friendly. Dưới capô gọi logic của
/evidence-ingest --source coderồi/evidence-analyze(CORE-CODE prompts). Reference: code-snapshot-conventions.md, code-analysis-prompts.md, evidence-lifecycle.md.
Input
| Arg | Required | Notes |
|---|---|---|
--ref |
optional | Repo path. Default: <cwd> của codebase (parent của .contextd/config.json). Mutually exclusive với --bundle. |
--scope |
optional | (Single-repo) Comma-separated paths/globs included. Default heuristic: src/**, pom.xml/package.json/build.gradle/Cargo.toml/go.mod, application.*, Dockerfile, *.yaml config. |
--bundle |
optional | Bundle mode: đường dẫn tới thư mục staging chứa bundle.yaml. Nếu pass --bundle, ignore --ref và --scope. Mutually exclusive với --ref. |
--label |
optional | Mô tả ngắn (≤ 30 ký tự). Single-repo: default bootstrap-{project} hoặc refresh-{project}-{date}. Bundle: override bundle.yaml#label. |
--skip-analyze |
optional | Chỉ ingest, không tự chạy /evidence-analyze. Dùng khi muốn review snapshot trước. |
--allow-configs |
optional | Cho phép đọc file config vào Section 3. Mặc định tất cả config bị block. Khi set, sẽ AskUserQuestion từng nhóm file trước khi đọc. Hard blocklist (prod/secret/key files) vẫn áp dụng. |
--with-drafts |
optional | Chạy thêm ON-DEMAND drafts sau CORE: c05/c06/c07 (variant=code) hoặc a05/a06/a07 (variant=agentic-engine). |
--variant |
optional | code (default, runtime codebase) | agentic-engine (markdown-heavy: slash commands, sub-agents, prompt templates). Vắng mặt → auto-detect (xem Bước 1.4). Single-repo only — bundle dùng per-repo variant trong bundle.yaml. |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 392 lines · 0 tokens per session scan A 35b503d235ab
code-analyze is a command published in the GitHub repository philngt/contextd (29 stars, last pushed 2mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 6,159 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
bm-doctor
Diagnose and recover basemind when it isn't working (MCP tools missing/erroring, "no index", dead server) — runs CLI checks and gives the client-specific way to reconnect the server.
heal
Self-healing orchestration. Diagnose F2/F3 failures, view proposals, accept/decline, disable.
trace
Render the reasoning trace for a task — filereads, outputclaims, toolcalls, decisions. Surfaces hallucinations (claims with grounded: false).
check
Verify code quality, security, performance, and coverage. One command to audit everything.
scramjet:troubleshoot
Diagnose unexpected command behavior and recommend safe resolution.
cleanup
Detect and remove orphaned code, unused components, dead routes, and stale database artifacts.