Expert-Coding-Harness: Skill for Cursor

.cursor/skills/source-reading-analyst/SKILL.md

source-reading-analyst is a skill for Cursor from ProgrammerAnthony/Expert-Coding-Harness. It costs 84 tokens per session (2,807 once invoked), scanned A, original, MIT.

A guided way to understand an existing codebase by tracing where features start, how calls and data move, and where errors or boundaries occur.

In plain words
What is it for?
Use it to locate an implementation, follow a call chain, map data flow, review architecture, or identify refactoring risks.
Why use it?
It reduces the time spent guessing how unfamiliar code works and helps separate evidence from assumptions before changing it.

Skill for Cursor

Written for Cursor: installed under .cursor/.

This is ProgrammerAnthony/Expert-Coding-Harness's own configuration. It tells Cursor how to work on Expert-Coding-Harness itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything Expert-Coding-Harness configures →

Reuse

Borrowing it

Nothing to install: this file belongs to ProgrammerAnthony/Expert-Coding-Harness. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/ProgrammerAnthony/Expert-Coding-Harness/master/.cursor/skills/source-reading-analyst/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/ProgrammerAnthony/Expert-Coding-Harness

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for source-reading-analyst

README.md
[![agentmods](https://agentmods.dev/badge/skills/programmeranthony/expert-coding-harness/source-reading-analyst/github.svg)](https://agentmods.dev/skills/programmeranthony/expert-coding-harness/source-reading-analyst)
Your own site
<a href="https://agentmods.dev/skills/programmeranthony/expert-coding-harness/source-reading-analyst"><img src="https://agentmods.dev/badge/skills/programmeranthony/expert-coding-harness/source-reading-analyst/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for source-reading-analyst

Your own site · 80×15
<a href="https://agentmods.dev/skills/programmeranthony/expert-coding-harness/source-reading-analyst"><img src="https://agentmods.dev/badge/skills/programmeranthony/expert-coding-harness/source-reading-analyst.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 84 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,807 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00084 $0.02807
Opus 5.5 $0.00034 $0.01123
Sonnet 5.5 $0.00017 $0.00561
Haiku 4.5 $0.00008 $0.00281

Measured 2mo ago against content hash 36c236eb8c6f, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

source-reading-analyst scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.cursor/skills/source-reading-analyst/SKILL.md · 253 lines

How it starts

The opening of the file, as written. The whole thing — 253 lines — stays where its author put it; the contents beside it link to each section on GitHub.

源码阅读分析师

铁律:证据优先,结论后置。 先定位代码证据,再输出解释与建议。

模式识别

启动时先识别任务类型并声明当前模式:

本次我将使用以下模式之一:
1. 快速问答模式(定位并回答一个或少量问题)
2. 全量导读模式(系统化输出阅读分析报告)
3. 改造建议模式(基于阅读结果给出演进建议,不改代码)

若用户未指定,默认从"快速问答模式"开始;当问题范围扩大时升级到"全量导读模式"。


统一工作流

阶段一:范围与目标确认

每次最多问 1-2 个问题,明确:

  • 关注边界(某个功能 / 模块 / 全仓)
  • 输出深度(5 分钟速览 / 30 分钟中等 / 深度走读)
  • 成功标准(回答具体问题、形成报告、形成改造路线图)

若用户已给出清晰范围,直接进入阶段二。

阶段二:证据收集与事实建模

按顺序执行:

  1. 找入口:命令入口、路由入口、任务调度入口、核心 API
  2. 找主链路:主流程调用链(Who calls Who)
  3. 找状态:关键数据结构、状态变更点、持久化边界
  4. 找异常:错误处理、重试、降级、兜底策略
  5. 找边界:模块边界、外部依赖、权限与安全边界

加载 references/reading-checklist.md 逐项检查,避免漏项。

阶段三:输出与校验

输出必须同时包含:

  • 事实:可定位到文件的证据
  • 解释:为何这样设计、可能权衡
  • 风险:可能的隐患或认知盲区
  • 建议:下一步阅读或改造优先级
  • 图表:用 Mermaid 可视化关键结构(参照图表选型规则)
  • 精彩代码片段:引用最能体现设计意图的 5-15 行代码,附逐行或分段解读
  • 亮眼设计提炼:与常规做法对比,指出该代码"出彩在哪里"——包括巧妙的抽象、优雅的接口、反直觉但正确的实现选择等

加载 references/report-template.md 使用统一报告结构。 加载 references/diagram-guide.md 选择并生成正确的 Mermaid 图。


图表选型规则

每次生成报告时必须至少包含一张 Mermaid 图。 根据分析重点选择图类型:

分析场景 优先图类型 说明
模块/组件关系、分层架构 graph TD(模块依赖图) 展示谁依赖谁、分层边界
HTTP 请求/函数调用时序 sequenceDiagram(序列图) 展示跨对象的交互顺序
状态机/业务流转 stateDiagram-v2(状态图) 展示对象生命周期与状态迁移
业务流程/决策分支 flowchart TD(流程图) 展示条件分支与步骤流转
实体关系/数据模型 erDiagram(ER 图) 展示数据库表/领域对象关系
类继承/接口实现 classDiagram(类图) 展示类型结构与继承关系
部署/服务拓扑 graph LR(拓扑图) 展示服务间通信与部署边界

图表通用要求(详见 references/diagram-guide.md):

  • 节点标签使用中文或与代码一致的名称,禁止使用无意义字母占位
  • 同步调用实线,异步调用虚线,必须附文字说明
  • 单图节点超过 10 个时按维度拆分
  • 每张图上方必须有一行中文说明其观察角度

模式 A:快速问答模式

适用:用户问"某功能在哪""这段做了什么""请求是怎么流转的"。

操作步骤

  1. 复述问题(单句)
  2. 定位 1-3 个关键文件
  3. 生成一张序列图或流程图体现核心调用链
  4. 回答问题并附证据路径
  5. 若有值得关注的代码技巧,展示 1 个精彩片段并点评
  6. 补充一个"下一步可查方向"

输出结构

  • 结论:一句话回答
  • 证据:关键文件路径与其作用说明
  • 调用链图:序列图(优先)或流程图,上方附一行中文说明链路范围
  • 精彩片段(可选):若存在值得关注的代码技巧,引用片段 + 一段点评
  • 风险/注意点:潜在误解或边界条件

模式 B:全量导读模式

适用:用户希望系统化看懂某个模块或整个仓库。

操作步骤

  1. 模块地图:按目录/职责分组
  2. 核心对象:关键类型、接口、服务
  3. 主流程:正常链路(输入 -> 处理 -> 输出)
  4. 异常流:错误、重试、回滚、补偿
  5. 依赖图:内部依赖与外部依赖
  6. 复杂度与风险:高耦合、高变更、高故障点
  7. 亮眼设计提炼:从以上分析中识别 2-4 个值得关注的精彩设计,每项附代码片段

Read the full file on GitHub · 253 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 253 lines · 84 tokens per session scan A 36c236eb8c6f

Subscribe to this mod's changes

source-reading-analyst is a skill published in the GitHub repository ProgrammerAnthony/Expert-Coding-Harness (246 stars, last pushed 5mo ago), licensed MIT. It adds 84 tokens to every session and 2,807 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

debug-optimize-lcp

Guides debugging and optimizing Largest Contentful Paint (LCP) using Chrome DevTools MCP tools. Use this skill whenever the user asks about LCP performance, slow page loads, Core Web Vitals optimization, or wants to understand why their page's main content takes too long to appear. Also use when the user mentions…

ChromeDevTools/chrome-devtools-mcp · 99 tokens

systematic-debugging

Use when debugging a failing test, build error, or runtime issue that isn't immediately obvious. Guides a 4-phase root cause analysis instead of random fix attempts.

open-metadata/OpenMetadata · 37 tokens

log-error-digest

Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports. Supports JSON, syslog, and Nginx formats with automatic detection. Use when a user uploads a .log file and asks to analyze errors, find patterns, debug issues, or…

zebbern/claude-code-guide · 71 tokens

cwv-optimizer

Diagnose and fix Core Web Vitals issues on AEM Edge Delivery Services pages. Goes deeper than generic CWV advice by understanding EDS-specific performance patterns including the 100KB LCP budget, E-L-D loading phases, block rendering behavior, and third-party script impact. Produces specific fixes for LCP, CLS, and…

adobe/skills · 112 tokens

incident-response-incident-response

Coordinate production incident triage, mitigation, investigation, recovery, and follow-up. Use when responding to outages or other incidents that require structured operational coordination.

rmyndharis/antigravity-skills · 36 tokens

ci-fixer

CI failures - read error, minimal fix, verify.

sipyourdrink-ltd/bernstein · 15 tokens