rag-rat: Skill for Claude Code

.agents/skills/using-rag-rat/SKILL.md

using-rag-rat is a skill for Claude Code from cq27-dev/rag-rat. It costs 139 tokens per session (2,612 once invoked), scanned A, original, MIT.

Instructions for navigating a repository indexed by rag-rat, a local code-intelligence system. It recommends using its searches and code-relationship views to understand the code before making changes.

In plain words
What is it for?
Use it in repositories with rag-rat.toml and an available rag-rat server to find symbols, trace code paths, inspect affected areas, and understand project-specific risks.
Why use it?
It can reveal callers, dependencies, tests, history, and recorded project decisions that a plain text search may miss. This reduces the chance of changing a load-bearing part of the code without noticing its constraints.

Skill for Claude Code

Written for Claude Code: PreToolUse hook event. Also seen: mentions Claude Code; installed under .agents/ (shared by several agents); mentions Codex.

This is cq27-dev/rag-rat's own configuration. It tells Claude Code how to work on rag-rat itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything rag-rat configures →

Reuse

Borrowing it

Nothing to install: this file belongs to cq27-dev/rag-rat. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/cq27-dev/rag-rat/main/.agents/skills/using-rag-rat/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/cq27-dev/rag-rat

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for using-rag-rat

README.md
[![agentmods](https://agentmods.dev/badge/skills/cq27-dev/rag-rat/using-rag-rat/github.svg)](https://agentmods.dev/skills/cq27-dev/rag-rat/using-rag-rat)
Your own site
<a href="https://agentmods.dev/skills/cq27-dev/rag-rat/using-rag-rat"><img src="https://agentmods.dev/badge/skills/cq27-dev/rag-rat/using-rag-rat/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for using-rag-rat

Your own site · 80×15
<a href="https://agentmods.dev/skills/cq27-dev/rag-rat/using-rag-rat"><img src="https://agentmods.dev/badge/skills/cq27-dev/rag-rat/using-rag-rat.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 139 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,612 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00139 $0.02612
Opus 5.5 $0.00056 $0.01045
Sonnet 5.5 $0.00028 $0.00522
Haiku 4.5 $0.00014 $0.00261

Measured 1mo ago against content hash 856212bdcc4b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

using-rag-rat scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/using-rag-rat/SKILL.md · 151 lines

How it starts

The opening of the file, as written. The whole thing — 151 lines — stays where its author put it; the contents beside it link to each section on GitHub.

using-rag-rat — navigate with the MCP, remember what you learn

This repo is indexed by rag-rat, a local repo-intelligence index + MCP server. One MCP call returns graph (callers/callees), git, GitHub papertrail, and drive-by repo memories (source-anchored invariants, decisions, risks) — all validated against current source. A grep can't surface any of that. Two rules follow.

Rule 1 — Find and understand through the MCP, not a shell sweep

Prefer these over grep/cat/file sweeps when browsing or understanding code:

  • semantic_search — "where is this concept implemented?" Current source chunks with inline graph, git, and papertrail.
  • symbol_lookup — exact/fuzzy symbol resolution (Rust/TS/Kotlin/C/C++/Python/Swift/Go), with any bound memories attached.
  • impact_surface — the coding preflight before editing any non-trivial symbol: callers, callees, tests, git history, papertrail, and the repo memories crossing that call path. Run it before you change something load-bearing — it's how you avoid missing an invariant.
  • find_callers / trace_callees — reverse/forward graph traversal instead of grepping for call sites.
  • read_chunk — current text for a chunk with anchor validation + graph + memories.
  • repo_brief / repo_clusters — orientation (spine, churn, god-modules, ownership clusters).
  • important_symbols — load-bearing symbols by (SCIP-aware) PageRank; pass personalize to bias toward what you're editing.

That's the daily loop. The MCP exposes many more tools — reach past the core ones by the question you're actually asking (full schemas: docs/mcp-tools.md):

When you want to… Reach for
Find where a concept/behavior lives semantic_search
Resolve a symbol by name (exact/fuzzy) symbol_lookup
See what calls X / what X calls find_callers / trace_callees
Know the blast radius before editing impact_surface (callers, callees, tests, history, memories — the preflight)
Read a chunk's exact current text read_chunk
Orient in an unfamiliar repo repo_brief (spine / churn / god_modules / refactor_candidates), repo_clusters
Find the load-bearing symbols important_symbols
Check if code duplicates what's already here find_clones (repo-wide), or find_clones with a symbol (id / ref, or path + line) for its clone class
Understand why code exists, or when/why it changed history_for a symbol (symbol/ref/id), path, chunk_id or commit — commits, blame, and the tracker issues / reviews that reference it
Search history by keyword history_search with source: commits, changes (commits + the files they touched), issues, rationale
Read docs / doc-comments for a symbol docs_for_symbol
Recall prior notes memory_search (keywords), memory_get (by memory_id, symbol, path, or call path)
Check index / embedding / tracker-cache health index_status (include: ["embeddings"] for embedding coverage)

Read the full file on GitHub · 151 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +4 lines 856212bdcc4b
  2. 2mo ago First seen · 147 lines · 139 tokens per session scan A 2f8afac5526b

Subscribe to this mod's changes

using-rag-rat is a skill published in the GitHub repository cq27-dev/rag-rat (26 stars, last pushed 28d ago), licensed MIT. It adds 139 tokens to every session and 2,612 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

using-rag-rat compared with skills from other repositories

using-rag-rat next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
using-rag-ratcq27-dev/rag-ratSkill2628d agoMITA139Claude Code
graph-retrievalstudy8677/repobrainSkill1.4k14d agoMITA46Claude Code
knowledge-layerstudy8677/repobrainSkill1.4k14d agoMITA42Claude Code
haiku-ragggozad/haiku.ragSkill650yesterdayMITA76Claude Code
gnogmickel/gnoSkill1174d agoMITA86Claude Code
opik-evaluatecomet-ml/opik-mcpSkill2259d agoApache-2.0A192Claude Code
grepai-embeddings-openaiyoanbernabeu/grepai-skillsSkill207d agoMITA28Claude Code