CODE SPELUNKERFrom instruction to evidence
Give the agent
a job it can finish.
A skill is a Markdown file with instructions. Your agent reads it alongside your app and follows one audit through to a report.
Run your first audit
- Download one skill or unzip the whole kit.
- Save its folder in
.claude/skills/,.agents/skills/for Codex, or.cursor/skills/. Each folder containsSKILL.md. - Tell the agent which skill to use and which feature to inspect. It can also read an attached skill file directly.
- Read the evidence and proposed diff. Authorize any implementation as a separate task.
These files guide an agent; they do not grant it access or guarantee that it finds every issue. Use a local test database and review the agent’s actions.
Agent setup references: Claude Code, Codex, Cursor.
Start with query hygiene ↗Local sample audit / source inspection
Agent / 2026-10-14
Using query-hygiene, source inspection only.
Tool
nl -ba ProjectController.php
nl -ba projects.blade.php
nl -ba Project.php
Finding / medium / static
ProjectController.php:11 paginates without
an explicit eager load. projects.blade.php:4
reads the tasks relation once per project.
Project.php:12 declares hasMany(Task::class).
The sample can trigger one tasks query per
project. It also loads task rows just to count
them. Runtime query growth is not measured.
Proposed diff / not applied
- Project::query()->paginate(20)
+ Project::query()->withCount('tasks')->paginate(20)
- $project->tasks->count()
+ $project->tasks_count
Next check
A named local endpoint test with 2 and 20
projects should check query count growth.
No source or database changes made.
Run against the included synthetic sample, not a client app. Query growth is a static finding; no database benchmark is claimed.
Keep the kit close
Get kit updates.
Save your interest in new skills and revisions. Updates are stored here; email delivery is not enabled yet.
Bring a second headlamp
Want us to run the whole kit against your app and fix what it finds?
Talk to Agency Intentional ↗. Tell us where the app is getting in your way.
Please leave credentials, repository access tokens and customer data out of this form.