Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add YuLaiZ/interactive-code-map --skill skillgit clone --depth 1 https://github.com/YuLaiZ/interactive-code-mapWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/yulaiz/interactive-code-map/skill)<a href="https://agentmods.dev/skills/yulaiz/interactive-code-map/skill"><img src="https://agentmods.dev/badge/skills/yulaiz/interactive-code-map/skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/yulaiz/interactive-code-map/skill"><img src="https://agentmods.dev/badge/skills/yulaiz/interactive-code-map/skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.02215 |
| Opus 5.5 | $0.00025 | $0.00886 |
| Sonnet 5.5 | $0.00013 | $0.00443 |
| Haiku 4.5 | $0.00006 | $0.00221 |
Grade A, and why
interactive-code-map scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 79 lines — stays where its author put it; the contents beside it link to each section on GitHub.
interactive-code-map
Use this skill to create a concise, evidence-backed interactive code map. It produces one HTML file and never opens a browser automatically. Besides a codebase, a described non-code business process can be mapped the same way.
Chinese reading version: SKILL.zh-CN.md. This
SKILL.mdis the sole executable entry; if the two files differ, this file takes precedence.
Workflow
- Establish the input boundary. Obtain either a repository directory plus the question to answer, or a described non-code business process plus, when available, a directory of supporting documents. Ask for missing scope; do not infer facts outside the supplied directory or the user's description.
- Confirm the optional interaction profile before generating. Ask: “Should keyboard operation and small-viewport usability be included in this HTML map’s acceptance scope? (Recommended)” An explicit preference already given by the user counts as confirmation. If the user does not confirm, continue with the map but treat these capabilities as out of scope for this delivery; do not claim or test them as accepted behavior. Do not remove renderer capabilities merely because they are unselected. The generated controls guide is diagram-kind specific: for a flowchart it shows click a card for details, click a relationship line to pin or unpin its hover-identical highlight,
Tabto select,Enterto open or pin, andEscto close and clear pins (node button semantics also acceptSpaceto open); for a sequence diagram it shows click a message or participant for details with single-selection highlight,Tabto select,Enterto open, andEscto close — relationship pinning does not apply. - Choose the CDN delivery profile. Default to
global; usechina-friendlyonly when the user explicitly prefers China-mainland delivery or identifies that audience. Treat conversation language as a weak signal, not a location fact. Only use a live speed measurement when the current environment represents the target audience and the user agrees to network probing. Select only a bundled profile; never add arbitrary CDN URLs or bypass SRI. Report the selected profile and rationale. - Inspect only within that boundary: code for repository inputs, or the user's supplied documents and statements for business-process inputs. Mark every MapSpec claim as verified, inferred, or unconfirmed.
- Form a MapSpec. Use mapspec-v1.schema.json as the authoritative structure. Every verified evidence item needs a real relative path and an inspected line range resolved against
--repo-root: code lines for repository inputs, or document lines (for example a requirements or process markdown file) for business-process inputs. A statement that comes only from the user's verbal description, with no inspectable file, must be marked inferred or unconfirmed — never verified. Choose the diagram kind deliberately and record it inmeta.diagramKind(flowchartis the default and needs no field). When the question asks who calls whom, in what order — request/response exchanges, callback and retry loops, protocol handshakes — usesequence: declareparticipantsplusmessages(withloop/opt/altframes, optional activation pairing, and three-state evidence on every participant and message) and nevernodes/edges. When the question asks about structure, dependencies, or branching ownership, keepflowchart. When both readings matter, generate two maps from the same evidence rather than mixing kinds. Set the optionalmeta.uiLocaledeliberately for each delivered map: useenfor the English Demo, and usezh-CNby default when the user is conversing in Chinese (unless they request English output). The fixed renderer UI copy—document language, graph region name, dependency-failure page, reading guide, relationship keys, condition marker, evidence-status caption, and controls guide—must consistently follow this value; never leave a mixed-language legend. Each node must expose its localized claim state with the renderer's small upper-left, legend-matched status dot as well as the border treatment.languageProfiledescribes the code or business source and does not select UI language. Preserve the supplied language of business node, group, and edge text; only translate business content when the user explicitly asks. For sequence maps keep the literal-text discipline: every display text (participant.title,message.label,frame.label,branches[].label) is single-line with no\n/\r; message labels and participant titles are encoded by the renderer's sequence encoder, while frame conditions are plain text and must not contain&;#<>"$:%— reword or move the fact into a messagedetailinstead. Keep one label at most 40 code points (100 is the hard cap; content moves intodetail), and keep one map at most about 30 declared messages (60 hard; above the soft limit prefer splitting by scenario into several maps). Never bypass the validator or hand-concatenate DSL text;activatesToanddeactivatesFrommust not both be true, neither may appear inside frames, and an outer activation may wrap whole frames with linear open-close pairing. - Read visual-quality-contract.md before generating or revising a multi-group map. Apply its relationship semantics, routing limits, label placement, locale, and visual-acceptance rules. Do not repair a complex graph by repeatedly layering ad-hoc routing changes; retain Mermaid's node-to-node corridor and make only the documented local adjustments.
- Validate and generate the artifact. First verify node --version is at least 20. If it is not, report that Node.js 20 or newer is required and retain the MapSpec for the user instead of attempting generation.
- Report the generated relative HTML path, the evidence-state limits, the confirmed interaction and CDN profiles, and any manual browser verification performed. Do not report browser behavior as verified unless it was actually checked.
What ships with it
15 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/mapspec-v1.build-rules.json 15 KB
- references/mapspec-v1.schema.json 15 KB
- references/visual-quality-contract.md 7.5 KB
- references/visual-quality-contract.zh-CN.md 6.1 KB
- renderer/build-html.mjs 12 KB runs code
- renderer/deps.config.mjs 3.6 KB runs code
- renderer/mapspec-to-mermaid-sequence.mjs 7.5 KB runs code
- renderer/mapspec-to-mermaid.mjs 3.7 KB runs code
- renderer/mermaid-encoder.mjs 1.2 KB runs code
- renderer/mermaid-sequence-encoder.mjs 3.3 KB runs code
- renderer/render.js 163 KB runs code
- renderer/styles.css 34 KB
- renderer/template.html 1.1 KB
- renderer/validate-map-spec.mjs 40 KB runs code
- SKILL.zh-CN.md 9.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +4 lines 141380142358
- 1mo ago First seen · 75 lines · 63 tokens per session scan A b030217a7140
interactive-code-map is a skill published in the GitHub repository YuLaiZ/interactive-code-map (7 stars, last pushed 7d ago), licensed MIT. It adds 63 tokens to every session and 2,215 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-to-diagram
Analyze codebases and automatically generate architecture diagrams, flowcharts, and org charts. Uses AST parsing to map import dependencies for Python, JS/TS, Go, and Java, outputting Mermaid or SVG files. Triggered when users ask to visualize code architecture, understand dependencies, draw a flowchart, or create a…
basemind
Navigate large or unfamiliar codebases via the basemind MCP server — outlines, symbol search, reference/caller lookups, commit history, blame, and diffs without reading source files. Reach for it whenever the user asks "where is X defined", "what calls Y", "what changed recently in Z", or whenever you're about to grep…
basemind-cli
Navigate codebases and manage caches via the basemind CLI — outlines, symbol search, reference/caller lookups, git history, blame, and diffs. For headless scripting, CI, or when driving the CLI more efficiently than interactive MCP calls. Shares the same index as the MCP server.
basemind-doctor
Diagnose and recover basemind when it isn't working — MCP tools missing or erroring, "no index" / "no indexed files", empty results that shouldn't be empty, or the MCP server seems dead. Runs CLI checks (no MCP server required) and gives the client-specific way to reconnect the server.
basemind-documents
Semantic + full-text search over documents and the web via basemind's RAG store — PDFs, Office, HTML, email, images (OCR), plus scraped/crawled web pages, with cross-encoder reranking, keyword and named-entity (NER) filters, and per-document summaries. Reach for it whenever the user asks to "search the docs / PDFs"…
basemind-scan
Build or refresh the basemind index by running basemind scan via the CLI. Use this when basemind reports "no index" / "no indexed files", when the MCP server isn't available, or after large changes when the index is stale. Works without the MCP server — it shells the basemind binary directly.