Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add dvcdsys/code-index/plugin install cix-coworkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dvcdsys/code-index/cix)<a href="https://agentmods.dev/skills/dvcdsys/code-index/cix"><img src="https://agentmods.dev/badge/skills/dvcdsys/code-index/cix/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/dvcdsys/code-index/cix"><img src="https://agentmods.dev/badge/skills/dvcdsys/code-index/cix.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00119 | $0.02304 |
| Opus 5.5 | $0.00048 | $0.00922 |
| Sonnet 5.5 | $0.00024 | $0.00461 |
| Haiku 4.5 | $0.00012 | $0.00230 |
Grade A, and why
cix scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Code Index (cix) — Semantic Code Search & Navigation
cix is a semantic code index that understands code via embeddings + AST
parsing. You reach it through the cix_* MCP tools (no shell, no CLI). The
right reflex is "cix when you don't have a pointer; read/grep when you do."
This connection talks to a cix SERVER, not a single project. One server may
hold many indexed repositories, and nothing is inferred from a working directory
— there is no "current project." Every per-repo tool needs an explicit
project (a repository's host_path). So the first move is always to discover
what's indexed.
First, orient
Before any per-repo call:
- Call
cix_list_projectsto see the indexed repositories. Each row has ahost_path(e.g./Users/me/acme-apiorgithub.com/acme/api@main). - Pick the
host_pathof the repo the user means, and pass it as theprojectargument to every per-repo tool below.
If the repo the user is asking about is not in cix_list_projects, this
skill cannot index it — indexing is server-side. Tell the user to index it (via
the cix dashboard, or cix init on the machine running the cix server), then
retry.
You don't have to memorize host_paths: if you call a per-repo tool with a
missing or unknown project, the server replies with an error that lists the
valid projects, so you can self-correct in one step.
(Multi-server: cix_list_servers lists configured servers; every tool takes an
optional server argument. Omit it for the default — most setups have one
server. Only pass server when the user names a specific backend; never guess a
name — call cix_list_servers.)
When to use which
Reach for cix first when:
- The starting point is open-ended ("how does indexing work?", "find the authentication middleware", "where is the main entry point?")
- You need cross-file navigation (definitions / references / callers)
- You're searching by meaning, not an exact string (
"JWT validation"should findverifyTokeneven without that phrase) - You're exploring an unfamiliar package or repo
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 192 lines · 119 tokens per session scan A a9681a576489
cix is a skill published in the GitHub repository dvcdsys/code-index (30 stars, last pushed 9d ago), licensed MIT. It adds 119 tokens to every session and 2,304 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
tilth
Use the tilth CLI for code reading, outlining, search, callers, blast-radius deps, and structural diffs. Activate when the user asks to explore a repo, find a symbol, trace callers, read a file, view a diff, or analyze impact. Prefer tilth over grep/cat/find/ls — one invocation returns AST-aware outlines, definitions…
mcpls
Install, configure, and run the mcpls CLI — a Rust binary bridging MCP to LSP that gives an agent compiler-grade code intelligence (hover, definitions, references, diagnostics, rename). Use when setting up or registering mcpls as an MCP server, writing or debugging an mcpls.toml, choosing CLI flags or MCPLS…
cocosearch-debugging
Use when debugging an error, unexpected behavior, or tracing how code flows through a system. Guides root cause analysis using CocoSearch semantic and symbol search.
cocosearch-refactoring
Use when planning a refactoring, extracting code into a new module, renaming across the codebase, or splitting a large file. Guides impact analysis and safe step-by-step execution using CocoSearch.
cocosearch-deps
Use when exploring dependency relationships, tracing file connections, analyzing change impact, or identifying hub files. Guides dependency graph exploration using CocoSearch.
use-ivygrep
Gather focused local repository context with ivygrep before implementing, debugging, reviewing, or explaining code. Use for coding tasks involving unfamiliar paths, branch changes, stack traces, architectural relationships, callers, dependents, tests, configuration, or documentation. Prefer one bounded context pack…