Not in the top 1,000 by GitHub stars
vibe-cafe/vibe-usage
Token 使用量统计工具（CLI）
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → c26e7a289974
No earlier version was observed for comparison.
View on GitHubAdd to my skills
Verified commit c26e7a28997444c8a245ec07c0f418b3bbccbbf4
git clone --filter=blob:none --no-checkout https://github.com/vibe-cafe/vibe-usage.git .hotskills/vibe-cafe-vibe-usage && git -C .hotskills/vibe-cafe-vibe-usage checkout --detach c26e7a28997444c8a245ec07c0f418b3bbccbbf4
# Copy each selected skill directory from .hotskills/vibe-cafe-vibe-usage into .agents/skills/<skill-name>/147GitHub stars
2stars in 7 days
1skill in this repository
19commits in 30 days
Heat
3.8- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
How it works
vibe-usage
When your agent uses it
Track and sync AI coding tool token usage to vibecafe.ai dashboard.
What it loads into context
Frontmatter
93 tokensAlways available to the agent
SKILL.md
554 tokensWhen the skill is activated
Reference documents
32,297 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Setup
- Commands
- When to Use
- Notes
Scripts executed separately
bin/vibe-usage.jspackage.jsonscripts/release.shsrc/api.jssrc/cindy-roots.jssrc/claude-roots.jssrc/client-meta.jssrc/cline-roots.jssrc/codearts-roots.jssrc/codex-roots.jssrc/cola-roots.jssrc/config.jssrc/craft-roots.jssrc/daemon-service.jssrc/daemon.jssrc/extra-roots.jssrc/hermes-roots.jssrc/index.jssrc/init.jssrc/kiki-migration.jssrc/kiki-roots.jssrc/kimi-roots.jssrc/opencode-roots.jssrc/output.jssrc/parsers/aggregate.jssrc/parsers/alma.jssrc/parsers/amp.jssrc/parsers/antigravity-db.jssrc/parsers/antigravity.jssrc/parsers/cindy-ledger.jssrc/parsers/claude-code.jssrc/parsers/cline-sdk.jssrc/parsers/cline.jssrc/parsers/codearts-agent.jssrc/parsers/codebuddy.jssrc/parsers/codex-cache.jssrc/parsers/codex-segments.jssrc/parsers/codex-usage-record.jssrc/parsers/codex.jssrc/parsers/cola.jssrc/parsers/contract.jssrc/parsers/copilot-cli.jssrc/parsers/craft-agent.jssrc/parsers/cursor.jssrc/parsers/devin.jssrc/parsers/dimagent.jssrc/parsers/droid.jssrc/parsers/dsh.jssrc/parsers/fs-utils.jssrc/parsers/gemini-cli.jssrc/parsers/grok.jssrc/parsers/hermes.jssrc/parsers/index.jssrc/parsers/kiki.jssrc/parsers/kimi-code.jssrc/parsers/kiro.jssrc/parsers/mcode.jssrc/parsers/mimocode.jssrc/parsers/omp.jssrc/parsers/openclaw.jssrc/parsers/opencode.jssrc/parsers/pi-coding-agent.jssrc/parsers/pi-session-jsonl.jssrc/parsers/qoder.jssrc/parsers/qwen-code.jssrc/parsers/roo-code.jssrc/parsers/sqlite.jssrc/parsers/trae-cli.jssrc/parsers/workbuddy.jssrc/parsers/zcode.jssrc/path-repair.jssrc/pi-roots.jssrc/qoder-roots.jssrc/quotas/cache.jssrc/quotas/index.jssrc/quotas/providers/grok.jssrc/quotas/providers/kimi-code.jssrc/quotas/providers/opencode-go.jssrc/quotas/providers/zai.jssrc/quotas/registry.jssrc/quotas/schema.jssrc/reset.jssrc/skill.jssrc/state.jssrc/summary.jssrc/sync.jssrc/tools.jssrc/workbuddy-roots.jstest-support/file-permissions.jstest/aggregate.test.jstest/alma.test.jstest/antigravity.test.jstest/api.test.jstest/cache-creation.test.jstest/cindy.test.jstest/claude-code.test.jstest/cli.test.jstest/client-meta.test.jstest/cline-sdk.test.jstest/cline.test.jstest/codearts-agent.test.jstest/codebuddy.test.jstest/codex-roots.test.jstest/codex.test.jstest/cola.test.jstest/cursor-diagnostics.test.jstest/cursor.test.jstest/daemon-service.test.jstest/devin.test.jstest/dimagent.test.jstest/droid.test.jstest/dsh-e2e.test.jstest/dsh.test.jstest/grok.test.jstest/hermes-discovery.test.jstest/hermes.test.jstest/kiki-migration.test.jstest/kiki.test.jstest/kimi-code-desktop.test.jstest/kimi-code-home.test.jstest/kimi-code-legacy.test.jstest/kimi-code.test.jstest/kiro.test.jstest/mcode.test.jstest/mimocode.test.jstest/opencode-go.test.jstest/opencode-roots.test.jstest/pi-compatible.test.jstest/qoder.test.jstest/quota-cache.test.jstest/quota.test.jstest/reset.test.jstest/state.test.jstest/summary.test.jstest/sync-privacy.test.jstest/sync.test.jstest/trae-cli.test.jstest/upstream-windows.test.jstest/workbuddy-e2e.test.jstest/workbuddy.test.jstest/zcode.test.js
Files
.github/workflows/test.ymlasset751 bytes.gitignoreasset217 bytesAGENTS.mddoc81,677 bytesREADME.mddoc41,438 bytesSKILL.mdcore1,913 bytesSKILL.mdcore1,913 bytesSKILL.mdcore1,913 bytesbin/vibe-usage.jsruns175 bytesdocs/WINDOWS_ACCEPTANCE.mddoc5,503 bytesdocs/hermes-daily-usage-rfc.mddoc6,654 bytespackage-lock.jsonasset348 bytespackage.jsonruns753 bytesscripts/release.shruns4,713 bytessrc/api.jsruns11,343 bytessrc/cindy-roots.jsruns2,279 bytessrc/claude-roots.jsruns5,846 bytessrc/client-meta.jsruns1,304 bytessrc/cline-roots.jsruns2,905 bytessrc/codearts-roots.jsruns2,099 bytessrc/codex-roots.jsruns1,187 bytessrc/cola-roots.jsruns397 bytessrc/config.jsruns1,587 bytessrc/craft-roots.jsruns460 bytessrc/daemon-service.jsruns28,325 bytessrc/daemon.jsruns1,904 bytessrc/extra-roots.jsruns13,644 bytessrc/hermes-roots.jsruns3,663 bytessrc/index.jsruns19,795 bytessrc/init.jsruns7,590 bytessrc/kiki-migration.jsruns6,332 bytessrc/kiki-roots.jsruns1,159 bytessrc/kimi-roots.jsruns2,705 bytessrc/opencode-roots.jsruns2,243 bytessrc/output.jsruns5,895 bytessrc/parsers/aggregate.jsruns8,117 bytessrc/parsers/alma.jsruns3,225 bytessrc/parsers/amp.jsruns5,440 bytessrc/parsers/antigravity-db.jsruns15,749 bytessrc/parsers/antigravity.jsruns25,879 bytessrc/parsers/cindy-ledger.jsruns4,752 bytessrc/parsers/claude-code.jsruns15,429 bytessrc/parsers/cline-sdk.jsruns6,858 bytessrc/parsers/cline.jsruns4,399 bytessrc/parsers/codearts-agent.jsruns6,904 bytessrc/parsers/codebuddy.jsruns8,421 bytessrc/parsers/codex-cache.jsruns4,571 bytessrc/parsers/codex-segments.jsruns5,298 bytessrc/parsers/codex-usage-record.jsruns1,585 bytessrc/parsers/codex.jsruns47,263 bytessrc/parsers/cola.jsruns805 bytessrc/parsers/contract.jsruns2,244 bytessrc/parsers/copilot-cli.jsruns3,814 bytessrc/parsers/craft-agent.jsruns647 bytessrc/parsers/cursor.jsruns28,134 bytessrc/parsers/devin.jsruns7,113 bytessrc/parsers/dimagent.jsruns3,454 bytessrc/parsers/droid.jsruns5,281 bytessrc/parsers/dsh.jsruns22,377 bytessrc/parsers/fs-utils.jsruns1,235 bytessrc/parsers/gemini-cli.jsruns5,755 bytessrc/parsers/grok.jsruns17,521 bytessrc/parsers/hermes.jsruns7,740 bytessrc/parsers/index.jsruns2,902 bytessrc/parsers/kiki.jsruns1,223 bytessrc/parsers/kimi-code.jsruns19,591 bytessrc/parsers/kiro.jsruns26,253 bytessrc/parsers/mcode.jsruns7,752 bytessrc/parsers/mimocode.jsruns2,808 bytessrc/parsers/omp.jsruns321 bytessrc/parsers/openclaw.jsruns4,359 bytessrc/parsers/opencode.jsruns6,749 bytessrc/parsers/pi-coding-agent.jsruns1,202 bytessrc/parsers/pi-session-jsonl.jsruns7,419 bytessrc/parsers/qoder.jsruns12,458 bytessrc/parsers/qwen-code.jsruns3,776 bytessrc/parsers/roo-code.jsruns4,761 bytessrc/parsers/sqlite.jsruns5,149 bytessrc/parsers/trae-cli.jsruns6,192 bytessrc/parsers/workbuddy.jsruns10,506 bytessrc/parsers/zcode.jsruns4,116 bytessrc/path-repair.jsruns1,114 bytessrc/pi-roots.jsruns4,621 bytessrc/qoder-roots.jsruns3,046 bytessrc/quotas/cache.jsruns3,208 bytessrc/quotas/index.jsruns1,215 bytessrc/quotas/providers/grok.jsruns4,995 bytessrc/quotas/providers/kimi-code.jsruns20,382 bytessrc/quotas/providers/opencode-go.jsruns7,949 bytessrc/quotas/providers/zai.jsruns5,763 bytessrc/quotas/registry.jsruns4,243 bytessrc/quotas/schema.jsruns5,816 bytessrc/reset.jsruns3,808 bytessrc/skill.jsruns4,225 bytessrc/state.jsruns9,182 bytessrc/summary.jsruns4,640 bytessrc/sync.jsruns28,474 bytessrc/tools.jsruns20,112 bytessrc/workbuddy-roots.jsruns682 bytestest-support/file-permissions.jsruns5,031 bytestest/aggregate.test.jsruns2,556 bytestest/alma.test.jsruns8,496 bytestest/antigravity.test.jsruns32,509 bytestest/api.test.jsruns4,317 bytestest/cache-creation.test.jsruns3,216 bytestest/cindy.test.jsruns7,393 bytestest/claude-code.test.jsruns18,155 bytestest/cli.test.jsruns18,810 bytestest/client-meta.test.jsruns2,096 bytestest/cline-sdk.test.jsruns11,754 bytestest/cline.test.jsruns2,611 bytestest/codearts-agent.test.jsruns12,969 bytestest/codebuddy.test.jsruns8,300 bytestest/codex-roots.test.jsruns3,597 bytestest/codex.test.jsruns59,434 bytestest/cola.test.jsruns7,890 bytestest/cursor-diagnostics.test.jsruns3,042 bytestest/cursor.test.jsruns17,363 bytestest/daemon-service.test.jsruns15,425 bytestest/devin.test.jsruns11,051 bytestest/dimagent.test.jsruns5,289 bytestest/droid.test.jsruns9,475 bytestest/dsh-e2e.test.jsruns4,872 bytestest/dsh.test.jsruns32,429 bytestest/grok.test.jsruns17,194 bytestest/hermes-discovery.test.jsruns10,620 bytestest/hermes.test.jsruns13,154 bytestest/kiki-migration.test.jsruns19,849 bytestest/kiki.test.jsruns8,586 bytestest/kimi-code-desktop.test.jsruns5,653 bytestest/kimi-code-home.test.jsruns1,801 bytestest/kimi-code-legacy.test.jsruns4,331 bytestest/kimi-code.test.jsruns3,752 bytestest/kiro.test.jsruns13,162 bytestest/mcode.test.jsruns9,963 bytestest/mimocode.test.jsruns6,395 bytestest/opencode-go.test.jsruns11,483 bytestest/opencode-roots.test.jsruns11,921 bytestest/pi-compatible.test.jsruns31,441 bytestest/qoder.test.jsruns14,035 bytestest/quota-cache.test.jsruns7,475 bytestest/quota.test.jsruns32,128 bytestest/reset.test.jsruns2,991 bytestest/state.test.jsruns7,015 bytestest/summary.test.jsruns1,845 bytestest/sync-privacy.test.jsruns1,970 bytestest/sync.test.jsruns26,823 bytestest/trae-cli.test.jsruns8,509 bytestest/upstream-windows.test.jsruns5,417 bytestest/workbuddy-e2e.test.jsruns5,092 bytestest/workbuddy.test.jsruns9,095 bytestest/zcode.test.jsruns4,195 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- vibe-usage
Repository facts
- License
- No license detected
- Created
- Feb 24, 2026
- Last pushed
- Nov 4, 2026
- Forks
- 47
- Open issues
- 7
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 2 notes
SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- 1 broad permissionin 1 file: SKILL.md:1
- 13 dangerous shell commandsin 3 files: test/kiki-migration.test.js:166 scripts/release.sh:102 test/droid.test.js:91
- 168 network referencesin 29 files: test/quota.test.js:442 README.md:3 test/sync.test.js:28 and 26 more
- 1 obfuscation signalin 1 file: test/dsh.test.js:107
- No instruction overrides
- 141 executable scriptsin 141 files: bin/vibe-usage.js:1 package.json:1 scripts/release.sh:1 and 138 more
- 39 references to secretsin 8 files: test/quota.test.js:354 test/quota-cache.test.js:22 AGENTS.md:192 and 5 more
- No requests to vote in Hot
Show all 363 signals by file
.gitignore
- Access to secretsline 2
[Credential-related source omitted]
AGENTS.md
- Network accessline 190
- **Upload identity** — `client-meta.js` reads the real package version from the shipped `package.json`, creates one `syncId` per `runSync`, and adds batch identity plus runtime/platform/hostname to every ingest request. Direct sync default - Network accessline 191
- **No TypeScript** — plain JavaScript throughout - **Subscription quota isolation** — `quota discover --json` only checks ordinary local presence signals and never opens credentials or reaches the network. `quota fetch --product … --json` - Network accessline 192
[Credential-related source omitted] - Access to secretsline 192
[Credential-related source omitted] - Access to secretsline 345
[Credential-related source omitted] - Access to secretsline 369
[Credential-related source omitted] - Network accessline 411
# Dev mode (separate config, custom API URL) VIBE_USAGE_DEV=1 VIBE_USAGE_API_URL=http://localhost:3000 node ./bin/vibe-usage.js init - Network accessline 412
VIBE_USAGE_DEV=1 VIBE_USAGE_API_URL=http://localhost:3000 node ./bin/vibe-usage.js init
README.md
- Network accessline 3
Track your AI coding tool token usage and sync to [vibecafe.ai](https://vibecafe.ai). - Network accessline 13
On the first run it: 1. Opens [vibecafe.ai/usage/device](https://vibecafe.ai/usage/device) in your browser — sign in, confirm the code shown in the terminal, click 「确认链接」; the key is saved to `~/.vibe-usage/config.json` - Network accessline 14
1. Opens [vibecafe.ai/usage/device](https://vibecafe.ai/usage/device) in your browser — sign in, confirm the code shown in the terminal, click 「确认链接」; the key is saved to `~/.vibe-usage/config.json` - Network accessline 21
Prefer a menu-bar app? [Vibe Usage for Mac](https://github.com/vibe-cafe/vibe-usage-app) · [for Windows](https://github.com/vibe-cafe/vibe-usage-windows). - Network accessline 25
If you don't have a local browser (CI, remote SSH session, container), pre-issue a key at [vibecafe.ai/usage/setup](https://vibecafe.ai/usage/setup) and pass it on the command line. Non-interactive runs never install the background service: - Network accessline 65
- A quota result may carry a machine-readable `emptyReason` (`limitReached` / `noWindow` / `notEntitled` / `sessionWithoutPlanLimits`) alongside the human `message`; it is additive within schema v1, so clients that do not know it ignore it, - Network accessline 66
- **Kimi Code** reads the official OAuth file from `$KIMI_CODE_HOME/credentials/kimi-code.json` (otherwise `~/.kimi-code/credentials/kimi-code.json`) and falls back to the legacy `$KIMI_SHARE_DIR` / `~/.kimi` location — the first login that - Network accessline 67
[Credential-related source omitted] - Access to secretsline 67
[Credential-related source omitted] - Network accessline 68
- **Grok** reads at most the final 2 MiB of the official CLI's ordinary `$GROK_HOME/logs/unified.jsonl` (default `~/.grok/logs/unified.jsonl`). It accepts only the structured `billing: fetched credits config` event and projects the current - Network accessline 69
- **OpenCode Go** reads only the `opencode-go` integration key from OpenCode's own credential table (`~/.local/share/opencode/opencode.db`, read-only via the shared SQLite helper), falling back to the CLI's `auth.json` `opencode.key` for th - Access to secretsline 70
[Credential-related source omitted] - Network accessline 148
- The Codex parser cache contains derived aggregates and replay metadata, not raw prompt or response text. It is independent of upload state and can be deleted safely (the next sync rebuilds it). `reset` intentionally keeps it so the requir - Network accessline 150
- Continuous syncing is on by default: the first run installs a background service (see [Background sync](#background-sync)); the [Vibe Usage Mac app](https://github.com/vibe-cafe/vibe-usage-app) is the menu-bar alternative - Network accessline 165
需要 HTTP/HTTPS 代理时，Node.js **22.21+ 或 24.5+** 可用 `NODE_USE_ENV_PROXY=1` 启用环境变量代理（[Node.js 官方说明](https://nodejs.org/en/learn/http/enterprise-network-configuration)）。以下为 macOS/Linux 终端示例，代理地址须替换为实际地址： - Network accessline 168
HTTPS_PROXY=http://127.0.0.1:7890 NODE_USE_ENV_PROXY=1 npx @vibe-cafe/vibe-usage sync - Network accessline 209
You can also install via the [open skills ecosystem](https://github.com/vercel-labs/skills): - Network accessline 222
VIBE_USAGE_DEV=1 VIBE_USAGE_API_URL=http://localhost:3000 npx @vibe-cafe/vibe-usage init - Network accessline 233
|-----|-------------| | `apiKey` | Your API key (starts with `vbu_`) | | `apiUrl` | Server URL (default: `https://vibecafe.ai`) | - Network accessline 234
| `apiKey` | Your API key (starts with `vbu_`) | | `apiUrl` | Server URL (default: `https://vibecafe.ai`) | | `hostname` | Stable device name for usage tracking (set at init, reused across syncs) | - Network accessline 235
| `apiUrl` | Server URL (default: `https://vibecafe.ai`) |
SKILL.md
- Broad permissionsline 1
Unsupported or unresolved allowed-tools declaration - Network accessline 16
Track your AI coding tool token usage and sync to [vibecafe.ai](https://vibecafe.ai/usage). - Network accessline 26
Headless machines: pre-issue a key at https://vibecafe.ai/usage/setup and run `npx @vibe-cafe/vibe-usage init --manual-key <vbu_...> --no-daemon`.
bin/vibe-usage.js
- Executable scriptline 1
#!/usr/bin/env node
docs/hermes-daily-usage-rfc.md
- Network accessline 20
源码依据：[用量记录](https://github.com/NousResearch/hermes-agent/blob/08b140d14e6c1d49f9b7ad02c9437fe940d54d65/agent/turn_usage.py)、[日志格式与轮转](https://github.com/NousResearch/hermes-agent/blob/08b140d14e6c1d49f9b7ad02c9437fe940d54d65/hermes_logging.
package.json
- Executable scriptline 1
Executable file - Network accessline 30
"repository": { "type": "git", "url": "git+https://github.com/vibe-cafe/vibe-usage.git" - Network accessline 31
"type": "git", "url": "git+https://github.com/vibe-cafe/vibe-usage.git" }, - Network accessline 32
"url": "git+https://github.com/vibe-cafe/vibe-usage.git" - Network accessline 33
}, "homepage": "https://github.com/vibe-cafe/vibe-usage#readme", "bugs": { - Network accessline 34
"homepage": "https://github.com/vibe-cafe/vibe-usage#readme", - Network accessline 35
"bugs": { "url": "https://github.com/vibe-cafe/vibe-usage/issues" }, - Network accessline 36
"url": "https://github.com/vibe-cafe/vibe-usage/issues"
scripts/release.sh
src/api.js
- Executable scriptline 1
Executable file
src/cindy-roots.js
- Executable scriptline 1
Executable file
src/claude-roots.js
- Executable scriptline 1
Executable file
src/client-meta.js
- Executable scriptline 1
Executable file
src/cline-roots.js
- Executable scriptline 1
Executable file
src/codearts-roots.js
- Executable scriptline 1
Executable file
src/codex-roots.js
- Executable scriptline 1
Executable file
src/cola-roots.js
- Executable scriptline 1
Executable file
src/config.js
- Executable scriptline 1
Executable file
src/craft-roots.js
- Executable scriptline 1
Executable file
src/daemon-service.js
- Executable scriptline 1
Executable file - Network accessline 215
const throttle = npx ? ` <key>ThrottleInterval</key>\n <integer>60</integer>\n` : ''; return `<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dt - Network accessline 216
return `<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> - Network accessline 217
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> - Network accessline 289
export function generateWindowsTaskXml(userId, wscriptPath, vbsPath) { return `<?xml version="1.0" encoding="UTF-16"?> <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"> - Network accessline 290
return `<?xml version="1.0" encoding="UTF-16"?> <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task"> <RegistrationInfo> - Network accessline 291
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
src/daemon.js
- Executable scriptline 1
Executable file
src/extra-roots.js
- Executable scriptline 1
Executable file
src/hermes-roots.js
- Executable scriptline 1
Executable file
src/index.js
- Executable scriptline 1
Executable file - Network accessline 50
console.log(` Config: ${getConfigPath()}`); console.log(` API key: ${config.apiKey.slice(0, 8)}...`); console.log(` API URL: ${config.apiUrl || 'https://vibecafe.ai'}`); - Network accessline 52
console.log(` API URL: ${config.apiUrl || 'https://vibecafe.ai'}`); - Network accessline 54
await printBoundAccount(config.apiUrl || 'https://vibecafe.ai', config.apiKey);
src/init.js
src/kiki-migration.js
- Executable scriptline 1
Executable file
src/kiki-roots.js
- Executable scriptline 1
Executable file
src/kimi-roots.js
- Executable scriptline 1
Executable file
src/opencode-roots.js
- Executable scriptline 1
Executable file
src/output.js
- Executable scriptline 1
Executable file
src/parsers/aggregate.js
- Executable scriptline 1
Executable file
src/parsers/alma.js
- Executable scriptline 1
Executable file
src/parsers/amp.js
- Executable scriptline 1
Executable file
src/parsers/antigravity-db.js
- Executable scriptline 1
Executable file
src/parsers/antigravity.js
- Executable scriptline 1
Executable file - Network accessline 198
const res = await fetch(url, { - Network accessline 208
async function probeHttpPort(ports, csrfToken) { for (const port of ports) { const baseUrl = `http://127.0.0.1:${port}`; - Network accessline 209
for (const port of ports) { const baseUrl = `http://127.0.0.1:${port}`; try { - Network accessline 210
const baseUrl = `http://127.0.0.1:${port}`;
src/parsers/cindy-ledger.js
- Executable scriptline 1
Executable file
src/parsers/claude-code.js
- Executable scriptline 1
Executable file
src/parsers/cline-sdk.js
- Executable scriptline 1
Executable file
src/parsers/cline.js
- Executable scriptline 1
Executable file
src/parsers/codearts-agent.js
- Executable scriptline 1
Executable file
src/parsers/codebuddy.js
- Executable scriptline 1
Executable file
src/parsers/codex-cache.js
- Executable scriptline 1
Executable file
src/parsers/codex-segments.js
- Executable scriptline 1
Executable file
src/parsers/codex-usage-record.js
- Executable scriptline 1
Executable file
src/parsers/codex.js
src/parsers/cola.js
- Executable scriptline 1
Executable file
src/parsers/contract.js
- Executable scriptline 1
Executable file
src/parsers/copilot-cli.js
- Executable scriptline 1
Executable file
src/parsers/craft-agent.js
- Executable scriptline 1
Executable file
src/parsers/cursor.js
- Executable scriptline 1
Executable file - Access to secretsline 96
[Credential-related source omitted] - Network accessline 192
return { Accept: accept, Origin: 'https://cursor.com', - Network accessline 193
Accept: accept, Origin: 'https://cursor.com', Referer: 'https://cursor.com/dashboard?tab=usage', - Network accessline 194
Origin: 'https://cursor.com', - Network accessline 195
Referer: 'https://cursor.com/dashboard?tab=usage', - Network accessline 218
function cursorWebBase() { return (process.env.CURSOR_WEB_BASE_URL?.trim() || 'https://cursor.com').replace(/\/+$/, ''); - Network accessline 219
return (process.env.CURSOR_WEB_BASE_URL?.trim() || 'https://cursor.com').replace(/\/+$/, ''); - Network accessline 230
let resp; try { resp = await fetch(url, { headers: { ...baseHeaders('text/csv,*/*;q=0.8'), ...headers }, signal }); - Network accessline 232
resp = await fetch(url, { headers: { ...baseHeaders('text/csv,*/*;q=0.8'), ...headers }, signal }); - Network accessline 422
let resp; try { resp = await fetch(url, { - Network accessline 423
try { resp = await fetch(url, { method: 'POST', - Network accessline 424
resp = await fetch(url, {
src/parsers/devin.js
- Executable scriptline 1
Executable file
src/parsers/dimagent.js
- Executable scriptline 1
Executable file
src/parsers/droid.js
- Executable scriptline 1
Executable file
src/parsers/dsh.js
- Executable scriptline 1
Executable file
src/parsers/fs-utils.js
- Executable scriptline 1
Executable file
src/parsers/gemini-cli.js
- Executable scriptline 1
Executable file
src/parsers/grok.js
- Executable scriptline 1
Executable file
src/parsers/hermes.js
- Executable scriptline 1
Executable file
src/parsers/index.js
- Executable scriptline 1
Executable file
src/parsers/kiki.js
- Executable scriptline 1
Executable file
src/parsers/kimi-code.js
- Executable scriptline 1
Executable file
src/parsers/kiro.js
- Executable scriptline 1
Executable file
src/parsers/mcode.js
- Executable scriptline 1
Executable file
src/parsers/mimocode.js
- Executable scriptline 1
Executable file
src/parsers/omp.js
- Executable scriptline 1
Executable file
src/parsers/openclaw.js
- Executable scriptline 1
Executable file
src/parsers/opencode.js
- Executable scriptline 1
Executable file
src/parsers/pi-coding-agent.js
- Executable scriptline 1
Executable file
src/parsers/pi-session-jsonl.js
- Executable scriptline 1
Executable file
src/parsers/qoder.js
- Executable scriptline 1
Executable file
src/parsers/qwen-code.js
- Executable scriptline 1
Executable file
src/parsers/roo-code.js
- Executable scriptline 1
Executable file
src/parsers/sqlite.js
- Executable scriptline 1
Executable file
src/parsers/trae-cli.js
- Executable scriptline 1
Executable file
src/parsers/workbuddy.js
- Executable scriptline 1
Executable file
src/parsers/zcode.js
- Executable scriptline 1
Executable file
src/path-repair.js
- Executable scriptline 1
Executable file
src/pi-roots.js
- Executable scriptline 1
Executable file
src/qoder-roots.js
- Executable scriptline 1
Executable file
src/quotas/cache.js
- Executable scriptline 1
Executable file
src/quotas/index.js
- Executable scriptline 1
Executable file
src/quotas/providers/grok.js
- Executable scriptline 1
Executable file
src/quotas/providers/kimi-code.js
- Executable scriptline 1
Executable file - Network accessline 20
const PRODUCT_ID = 'kimi-code'; const DEFAULT_USAGE_URL = 'https://api.kimi.com/coding/v1/usages'; - Network accessline 21
const DEFAULT_USAGE_URL = 'https://api.kimi.com/coding/v1/usages'; - Network accessline 22
const DEFAULT_OAUTH_HOST = 'https://auth.kimi.com'; - Access to secretsline 199
[Credential-related source omitted] - Access to secretsline 321
[Credential-related source omitted] - Access to secretsline 329
[Credential-related source omitted]
src/quotas/providers/opencode-go.js
src/quotas/providers/zai.js
- Executable scriptline 1
Executable file - Network accessline 4
const PRODUCT_ID = 'zcode'; const BIGMODEL_USAGE_URL = 'https://open.bigmodel.cn/api/monitor/usage/quota/limit'; - Network accessline 5
const BIGMODEL_USAGE_URL = 'https://open.bigmodel.cn/api/monitor/usage/quota/limit'; - Network accessline 6
const ZAI_USAGE_URL = 'https://api.z.ai/api/monitor/usage/quota/limit'; - Access to secretsline 9
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted]
src/quotas/registry.js
- Executable scriptline 1
Executable file
src/quotas/schema.js
- Executable scriptline 1
Executable file
src/reset.js
src/skill.js
src/state.js
- Executable scriptline 1
Executable file
src/summary.js
src/sync.js
src/tools.js
- Executable scriptline 1
Executable file
src/workbuddy-roots.js
- Executable scriptline 1
Executable file
test-support/file-permissions.js
- Executable scriptline 1
Executable file
test/aggregate.test.js
- Executable scriptline 1
Executable file
test/alma.test.js
- Executable scriptline 1
Executable file
test/antigravity.test.js
- Executable scriptline 1
Executable file
test/api.test.js
- Executable scriptline 1
Executable file - Network accessline 12
}); const address = server.address(); const url = `http://127.0.0.1:${address.port}`; - Network accessline 13
const address = server.address(); const url = `http://127.0.0.1:${address.port}`; try { - Network accessline 14
const url = `http://127.0.0.1:${address.port}`;
test/cache-creation.test.js
- Executable scriptline 1
Executable file
test/cindy.test.js
- Executable scriptline 1
Executable file
test/claude-code.test.js
- Executable scriptline 1
Executable file
test/cli.test.js
test/client-meta.test.js
- Executable scriptline 1
Executable file
test/cline-sdk.test.js
- Executable scriptline 1
Executable file
test/cline.test.js
- Executable scriptline 1
Executable file
test/codearts-agent.test.js
- Executable scriptline 1
Executable file
test/codebuddy.test.js
- Executable scriptline 1
Executable file
test/codex-roots.test.js
- Executable scriptline 1
Executable file
test/codex.test.js
- Executable scriptline 1
Executable file
test/cola.test.js
- Executable scriptline 1
Executable file
test/cursor-diagnostics.test.js
- Executable scriptline 1
Executable file
test/cursor.test.js
- Executable scriptline 1
Executable file - Network accessline 363
test('Cursor reports nested IPv4/IPv6 connection failures without exposing error messages', async (t) => { await withCursorDb(t); const detail = `https://proxy-user:proxy-password@proxy.invalid/ ${TOKEN}`; - Network accessline 364
await withCursorDb(t); const detail = `https://proxy-user:proxy-password@proxy.invalid/ ${TOKEN}`; const aggregate = new AggregateError([ - Network accessline 365
const detail = `https://proxy-user:proxy-password@proxy.invalid/ ${TOKEN}`;
test/daemon-service.test.js
- Executable scriptline 1
Executable file
test/devin.test.js
- Executable scriptline 1
Executable file
test/dimagent.test.js
- Executable scriptline 1
Executable file
test/droid.test.js
test/dsh-e2e.test.js
test/dsh.test.js
test/grok.test.js
- Executable scriptline 1
Executable file
test/hermes-discovery.test.js
- Executable scriptline 1
Executable file
test/hermes.test.js
- Executable scriptline 1
Executable file
test/kiki-migration.test.js
- Executable scriptline 1
Executable file - Network accessline 154
[Credential-related source omitted] - Network accessline 155
[Credential-related source omitted] - Network accessline 156
[Credential-related source omitted] - Dangerous shell operationline 166
const sync = () => exec(process.execPath, ['--input-type=module', '-e', command], { cwd: process.cwd(), env }); - Dangerous shell operationline 173
await exec(process.execPath, ['bin/vibe-usage.js', 'config', 'set', 'kikiStartAt', T], { cwd: process.cwd(), env }); - Dangerous shell operationline 174
await assert.rejects(exec(process.execPath, ['bin/vibe-usage.js', 'config', 'set', 'kikiStartAt', '2026-10-05T12:31:00Z'], { cwd: process.cwd(), env }), /UTC/); - Dangerous shell operationline 181
await assert.rejects(exec(process.execPath, ['bin/vibe-usage.js', 'config', 'set', 'kikiStartAt', oldTime], { cwd: process.cwd(), env }), /切点不能直接更改/); - Dangerous shell operationline 198
await exec(process.execPath, ['--input-type=module', '-e', command], { cwd: process.cwd(), - Network accessline 228
[Credential-related source omitted] - Network accessline 229
[Credential-related source omitted] - Network accessline 230
[Credential-related source omitted] - Dangerous shell operationline 243
const result = await exec(process.execPath, ['--input-type=module', '-e', command], { cwd: process.cwd(), env }); - Network accessline 285
[Credential-related source omitted] - Network accessline 286
[Credential-related source omitted] - Network accessline 287
[Credential-related source omitted] - Dangerous shell operationline 297
const sync = () => exec(process.execPath, ['--input-type=module', '-e', command], { cwd: process.cwd(), env }); - Dangerous shell operationline 301
await exec(process.execPath, ['bin/vibe-usage.js', 'config', 'set', 'kikiStartAt', T], { cwd: process.cwd(), env }); - Dangerous shell operationline 307
await exec(process.execPath, ['bin/vibe-usage.js', 'config', 'set', 'kikiStartAt', 'none'], { cwd: process.cwd(), env }); - Dangerous shell operationline 310
const shown = await exec(process.execPath, ['bin/vibe-usage.js', 'config', 'show'], { cwd: process.cwd(), env }); - Dangerous shell operationline 315
await assert.rejects(exec(process.execPath, ['bin/vibe-usage.js', 'config', 'set', 'kikiStartAt', T], { cwd: process.cwd(), env }), /切点不能直接更改/);
test/kiki.test.js
- Executable scriptline 1
Executable file
test/kimi-code-desktop.test.js
- Executable scriptline 1
Executable file
test/kimi-code-home.test.js
- Executable scriptline 1
Executable file
test/kimi-code-legacy.test.js
- Executable scriptline 1
Executable file
test/kimi-code.test.js
- Executable scriptline 1
Executable file
test/kiro.test.js
- Executable scriptline 1
Executable file
test/mcode.test.js
- Executable scriptline 1
Executable file
test/mimocode.test.js
- Executable scriptline 1
Executable file
test/opencode-go.test.js
- Executable scriptline 1
Executable file - Network accessline 84
now: new Date('2026-09-22T16:00:00Z'), fetchImpl: async (url, options) => { requests.push({ url, options }); - Network accessline 85
fetchImpl: async (url, options) => { requests.push({ url, options }); return jsonResponse(usagePayload); - Network accessline 86
requests.push({ url, options }); - Network accessline 91
assert.equal(requests.length, 1); assert.equal(requests[0].url, 'https://opencode.ai/zen/go/v1/usage'); - Network accessline 92
assert.equal(requests[0].url, 'https://opencode.ai/zen/go/v1/usage'); - Network accessline 134
assert.equal((await fetch(401)).status, 'unauthorized'); - Network accessline 135
assert.equal((await fetch(403)).status, 'no_data'); - Network accessline 136
assert.equal((await fetch(500)).status, 'retryable_error'); - Network accessline 182
now: new Date('2026-09-26T09:00:00Z'), fetchImpl: async (url, options) => { requests.push({ url, options }); - Network accessline 183
fetchImpl: async (url, options) => { requests.push({ url, options }); return jsonResponse(usagePayload); - Network accessline 184
requests.push({ url, options });
test/opencode-roots.test.js
- Executable scriptline 1
Executable file
test/pi-compatible.test.js
- Executable scriptline 1
Executable file
test/qoder.test.js
- Executable scriptline 1
Executable file
test/quota-cache.test.js
test/quota.test.js
- Executable scriptline 1
Executable file - Access to secretsline 354
[Credential-related source omitted] - Access to secretsline 386
[Credential-related source omitted] - Access to secretsline 389
[Credential-related source omitted] - Access to secretsline 422
[Credential-related source omitted] - Network accessline 442
const credentialDirectory = join(root, '.kimi', 'credentials'); const credentialPath = join(credentialDirectory, 'kimi-code.json'); const oauthURL = 'https://auth.example.test/token'; - Network accessline 443
const credentialPath = join(credentialDirectory, 'kimi-code.json'); const oauthURL = 'https://auth.example.test/token'; const usageURL = 'https://api.example.test/usages'; - Network accessline 444
const oauthURL = 'https://auth.example.test/token'; - Network accessline 445
const usageURL = 'https://api.example.test/usages'; - Access to secretsline 449
[Credential-related source omitted] - Access to secretsline 474
[Credential-related source omitted] - Access to secretsline 488
[Credential-related source omitted] - Access to secretsline 504
[Credential-related source omitted] - Network accessline 513
environment: {}, home: root, oauthURL: 'https://auth.example.test/token', - Network accessline 514
home: root, oauthURL: 'https://auth.example.test/token', usageURL: 'https://api.example.test/usages', - Network accessline 515
oauthURL: 'https://auth.example.test/token', - Network accessline 516
usageURL: 'https://api.example.test/usages', - Access to secretsline 523
[Credential-related source omitted] - Access to secretsline 548
[Credential-related source omitted] - Network accessline 556
environment: {}, home: root, oauthURL: 'https://auth.example.test/token', - Network accessline 557
home: root, oauthURL: 'https://auth.example.test/token', usageURL: 'https://api.example.test/usages', - Network accessline 558
oauthURL: 'https://auth.example.test/token', - Network accessline 559
usageURL: 'https://api.example.test/usages', - Access to secretsline 566
[Credential-related source omitted] - Access to secretsline 593
[Credential-related source omitted] - Access to secretsline 605
[Credential-related source omitted] - Network accessline 633
const environment = { TEST_KIMI_HOME: root, TEST_KIMI_OAUTH_URL: `http://127.0.0.1:${address.port}/token`, - Network accessline 634
TEST_KIMI_HOME: root, TEST_KIMI_OAUTH_URL: `http://127.0.0.1:${address.port}/token`, TEST_KIMI_USAGE_URL: `http://127.0.0.1:${address.port}/usages`, - Network accessline 635
TEST_KIMI_OAUTH_URL: `http://127.0.0.1:${address.port}/token`, - Network accessline 636
TEST_KIMI_USAGE_URL: `http://127.0.0.1:${address.port}/usages`, - Access to secretsline 657
[Credential-related source omitted] - Network accessline 663
environment: {}, home: root, oauthURL: 'https://auth.example.test/token', - Network accessline 664
home: root, oauthURL: 'https://auth.example.test/token', now: new Date('2026-09-07T00:00:00Z'), - Network accessline 665
oauthURL: 'https://auth.example.test/token', - Access to secretsline 689
[Credential-related source omitted] - Network accessline 696
environment: {}, home: root, oauthURL: 'https://auth.example.test/token', - Network accessline 697
home: root, oauthURL: 'https://auth.example.test/token', now: new Date('2026-09-07T00:00:00Z'), - Network accessline 698
oauthURL: 'https://auth.example.test/token', - Access to secretsline 764
[Credential-related source omitted] - Network accessline 775
const requests = []; const fetchImpl = async (url, request) => { requests.push([url, request.headers.Authorization]); - Network accessline 776
const fetchImpl = async (url, request) => { requests.push([url, request.headers.Authorization]); return jsonResponse(zaiPayload); - Network accessline 777
requests.push([url, request.headers.Authorization]); - Access to secretsline 782
[Credential-related source omitted] - Access to secretsline 786
[Credential-related source omitted] - Network accessline 793
assert.deepEqual(requests, [ [ 'https://open.bigmodel.cn/api/monitor/usage/quota/limit', - Network accessline 794
[ 'https://open.bigmodel.cn/api/monitor/usage/quota/limit', 'Bearer bigmodel-fixture-key', - Network accessline 795
'https://open.bigmodel.cn/api/monitor/usage/quota/limit', - Network accessline 797
], [ 'https://api.z.ai/api/monitor/usage/quota/limit', - Network accessline 798
[ 'https://api.z.ai/api/monitor/usage/quota/limit', 'Bearer zai-fixture-key', - Network accessline 799
'https://api.z.ai/api/monitor/usage/quota/limit', - Access to secretsline 809
[Credential-related source omitted] - Access to secretsline 810
[Credential-related source omitted] - Network accessline 818
assert.equal(result.status, 'ok'); assert.deepEqual(request, [ 'https://open.bigmodel.cn/api/monitor/usage/quota/limit', - Network accessline 819
assert.deepEqual(request, [ 'https://open.bigmodel.cn/api/monitor/usage/quota/limit', 'Bearer bigmodel-fixture-key', - Network accessline 820
'https://open.bigmodel.cn/api/monitor/usage/quota/limit', - Access to secretsline 829
[Credential-related source omitted] - Access to secretsline 865
[Credential-related source omitted] - Access to secretsline 878
[Credential-related source omitted]
test/reset.test.js
- Executable scriptline 1
Executable file
test/state.test.js
- Executable scriptline 1
Executable file - Network accessline 67
[Credential-related source omitted] - Network accessline 68
[Credential-related source omitted] - Network accessline 69
[Credential-related source omitted] - Network accessline 122
saveState( { buckets: { 'codex|m|p|h|t': 'hash1' }, sessions: {} }, stateIdentity({ apiUrl: 'https://vibecafe.ai', apiKey }), - Network accessline 123
{ buckets: { 'codex|m|p|h|t': 'hash1' }, sessions: {} }, stateIdentity({ apiUrl: 'https://vibecafe.ai', apiKey }), ); - Network accessline 124
stateIdentity({ apiUrl: 'https://vibecafe.ai', apiKey }),
test/summary.test.js
- Executable scriptline 1
Executable file - Network accessline 28
test('summary has a 按工具 table ordered by cost, biggest first', () => { const md = render(DATA, 7, 'https://vibecafe.ai'); - Network accessline 29
const md = render(DATA, 7, 'https://vibecafe.ai'); - Network accessline 34
test('按工具 sits above 按模型 and 按项目', () => { const md = render(DATA, 7, 'https://vibecafe.ai'); - Network accessline 35
const md = render(DATA, 7, 'https://vibecafe.ai'); - Network accessline 45
test('empty data still short-circuits to the 暂无数据 message', () => { const md = render({ buckets: [], sessions: [] }, 7, 'https://vibecafe.ai'); - Network accessline 46
const md = render({ buckets: [], sessions: [] }, 7, 'https://vibecafe.ai');
test/sync-privacy.test.js
- Executable scriptline 1
Executable file
test/sync.test.js
- Executable scriptline 1
Executable file - Network accessline 28
const { port } = server.address(); try { return await run(`http://127.0.0.1:${port}`); - Network accessline 29
try { return await run(`http://127.0.0.1:${port}`); } finally { - Network accessline 30
return await run(`http://127.0.0.1:${port}`); - Network accessline 51
const config = { lastUploadProject: true, lastUploadProjectApiUrl: 'https://confirmed.example', - Network accessline 52
lastUploadProject: true, lastUploadProjectApiUrl: 'https://confirmed.example', }; - Network accessline 53
lastUploadProjectApiUrl: 'https://confirmed.example', - Network accessline 54
}; assert.equal( resolveCachedUploadProjectSetting(config, 'https://confirmed.example'), - Network accessline 55
assert.equal( resolveCachedUploadProjectSetting(config, 'https://confirmed.example'), true, - Network accessline 56
resolveCachedUploadProjectSetting(config, 'https://confirmed.example'), - Network accessline 58
); assert.equal( resolveCachedUploadProjectSetting(config, 'https://different.example'), - Network accessline 59
assert.equal( resolveCachedUploadProjectSetting(config, 'https://different.example'), undefined, - Network accessline 60
resolveCachedUploadProjectSetting(config, 'https://different.example'), - Network accessline 62
); assert.equal( resolveCachedUploadProjectSetting({ lastUploadProject: false }, 'https://confirmed.example'), - Network accessline 63
assert.equal( resolveCachedUploadProjectSetting({ lastUploadProject: false }, 'https://confirmed.example'), undefined, - Network accessline 64
resolveCachedUploadProjectSetting({ lastUploadProject: false }, 'https://confirmed.example'),
test/trae-cli.test.js
- Executable scriptline 1
Executable file
test/upstream-windows.test.js
- Executable scriptline 1
Executable file
test/workbuddy-e2e.test.js
test/workbuddy.test.js
- Executable scriptline 1
Executable file
test/zcode.test.js
- Executable scriptline 1
Executable file
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Declared and executed: 2 facts
- Contacts www.apple.com, which SKILL.md, the README and the plugin manifest do not mentionsrc/daemon-service.js:217High confidence
- Contacts schemas.microsoft.com, which SKILL.md, the README and the plugin manifest do not mentionsrc/daemon-service.js:291High confidence
Signal confidence: 362 facts
- Network access in prose of documentationAGENTS.md:190Low confidence
- Network access in prose of documentationAGENTS.md:191Low confidence
- Network access in prose of documentationAGENTS.md:192Low confidence
- Access to secrets in prose of documentation: a variable, placeholder or call, not a stored valueAGENTS.md:192Low confidence
- Access to secrets in prose of documentation: a variable, placeholder or call, not a stored valueAGENTS.md:345Low confidence
- Access to secrets in prose of documentation: a variable, placeholder or call, not a stored valueAGENTS.md:369Low confidence
- Network access in code of documentationAGENTS.md:411Low confidence
- Network access in code of documentationAGENTS.md:412Low confidence
- Network access in prose of documentationREADME.md:3Low confidence
- Network access in prose of documentationREADME.md:13Low confidence
- Network access in prose of documentationREADME.md:14Low confidence
- Network access in prose of documentationREADME.md:21Low confidence
- Network access in prose of documentationREADME.md:25Low confidence
- Network access in prose of documentationREADME.md:65Low confidence
- Network access in prose of documentationREADME.md:66Low confidence
- Network access in prose of documentationREADME.md:67Low confidence
- Access to secrets in prose of documentationREADME.md:67Low confidence
- Network access in prose of documentationREADME.md:68Low confidence
- Network access in prose of documentationREADME.md:69Low confidence
- Access to secrets in prose of documentationREADME.md:70Low confidence
- Network access in prose of documentationREADME.md:148Low confidence
- Network access in prose of documentationREADME.md:150Low confidence
- Network access in prose of documentationREADME.md:165Low confidence
- Network access in code of documentationREADME.md:168Low confidence
- Network access in prose of documentationREADME.md:209Low confidence
- Network access in code of documentationREADME.md:222Low confidence
- Network access in prose of documentationREADME.md:233Low confidence
- Network access in prose of documentationREADME.md:234Low confidence
- Network access in prose of documentationREADME.md:235Low confidence
- Broad permissions in the frontmatter of the SKILL.mdSKILL.md:1High confidence
- Network access in prose of the SKILL.mdSKILL.md:16Low confidence
- Network access in prose of the SKILL.mdSKILL.md:26Low confidence
- Executable script in code of a file that runsbin/vibe-usage.js:1High confidence
- Network access in prose of documentationdocs/hermes-daily-usage-rfc.md:20Low confidence
- Executable script in code of a file that runspackage.json:1High confidence
- Network access in code of a file that runspackage.json:30High confidence
- Network access in code of a file that runspackage.json:31High confidence
- Network access in code of a file that runspackage.json:32High confidence
- Network access in code of a file that runspackage.json:33High confidence
- Network access in code of a file that runspackage.json:34High confidence
- Network access in code of a file that runspackage.json:35High confidence
- Network access in code of a file that runspackage.json:36High confidence
- Executable script in code of a file that runsscripts/release.sh:1High confidence
- Dangerous shell operation in code of a file that runsscripts/release.sh:102High confidence
- Executable script in code of a file that runssrc/api.js:1High confidence
- Executable script in code of a file that runssrc/cindy-roots.js:1High confidence
- Executable script in code of a file that runssrc/claude-roots.js:1High confidence
- Executable script in code of a file that runssrc/client-meta.js:1High confidence
- Executable script in code of a file that runssrc/cline-roots.js:1High confidence
- Executable script in code of a file that runssrc/codearts-roots.js:1High confidence
and 312 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
