Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/JansenAnalytics/claudexnpx agentmods add skills/jansenanalytics/claudex/codebase-navigatorWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/jansenanalytics/claudex/codebase-navigator)<a href="https://agentmods.dev/skills/jansenanalytics/claudex/codebase-navigator"><img src="https://agentmods.dev/badge/skills/jansenanalytics/claudex/codebase-navigator/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/jansenanalytics/claudex/codebase-navigator"><img src="https://agentmods.dev/badge/skills/jansenanalytics/claudex/codebase-navigator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00030 | $0.00483 |
| Opus 5.5 | $0.00012 | $0.00193 |
| Sonnet 5.5 | $0.00006 | $0.00097 |
| Haiku 4.5 | $0.00003 | $0.00048 |
Grade A, and why
codebase-navigator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
codebase-navigator
Rapidly understand any codebase: identify entry points, map architecture, find key patterns, summarize modules, trace data flow.
When to Use
- Onboarding to a new project
- Understanding unfamiliar code
- Finding where functionality lives
- Mapping dependencies between modules
- Creating architectural overviews
Scripts
codebase-scan.sh
Quick codebase overview — detects languages, frameworks, entry points, file counts.
bash scripts/codebase-scan.sh /path/to/project
bash scripts/codebase-scan.sh .
Output: Markdown summary with languages, frameworks, entry points, directory structure, LOC counts.
module-map.py
Build a module/import dependency map.
python3 scripts/module-map.py --dir src/
python3 scripts/module-map.py --dir src/ --format mermaid
python3 scripts/module-map.py --dir lib/ --format json
Arguments:
--dir <path>— Directory to scan (default:.)--format tree|mermaid|json— Output format (default: tree)
Identifies: core modules (most imported), leaf modules, circular dependencies.
trace-flow.sh
Trace a function/symbol through the codebase.
bash scripts/trace-flow.sh --symbol "handlePayment" --dir src/
bash scripts/trace-flow.sh --symbol "UserService" --depth 3
Arguments:
--symbol <name>— Function/class/string to trace (required)--dir <path>— Directory to search (default:.)--depth <n>— Call chain depth (default: 2)
Uses rg (ripgrep) for fast searching.
References
codebase-patterns.md— Common project structures and how to identify them
Requirements
rg(ripgrep) — For fast code searchingpython3— For module-map.py
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 76 lines · 30 tokens per session scan A a51cc63a9577
codebase-navigator is a skill published in the GitHub repository JansenAnalytics/claudex (5 stars, last pushed 3mo ago), licensed MIT. It adds 30 tokens to every session and 483 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agenttrace-session-audit
Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.
octocode-research
Use when code must be checked, not assumed: trace connections (callers, imports, cross-repo wiring, what breaks if I change it), locate behavior, map a system, diagnose a failure, RCA. Also for external repositories, npm packages, upstream/prior art, and general research. Plan a coding flow before writing, validate it…
code-review-web
Review web application code for bugs, security issues, performance problems, and stack-specific anti-patterns. Use this skill whenever the user wants to review code, debug a production issue, investigate a build failure, audit security, or check a PR before merging. Triggers on code review, review my code, debug…
tilth
Use the tilth CLI for code reading, outlining, search, callers, blast-radius deps, and structural diffs. Activate when the user asks to explore a repo, find a symbol, trace callers, read a file, view a diff, or analyze impact. Prefer tilth over grep/cat/find/ls — one invocation returns AST-aware outlines, definitions…
logic-lens
AI-powered Claude Code skill that performs deep code review using formal logic and reasoning frameworks to detect bugs, anti-patterns, and security risks beyond what linters catch.
incident-response-skill
A skill that uses object-style tool references with purpose descriptions and required flags, plus strict validation.