codealive
CodeAlive-AI/codealive-skillsPlugin
CodeAlive context engine for semantic code search and AI-powered codebase Q&A. Enables AI coding agents to understand entire codebases beyond just open files — search across all indexed repositories, trace cross-service dependencies, discover usage patterns, and get synthesized answers to architectural questions. Includes a lightweight code exploration subagent, authentication hooks, and multiple search modes (fast lexical, semantic, and deep cross-cutting). Works standalone or alongside the ...
Why this score
This repo hosts 2 add-ons, so its 15 stars are split between them (about 8 each) for scoring.
Popularity score: 53/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at commit cf0b6523dcab, with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.skills/codealive-context-engine/setup.py:245 and 2 more
- Runs shell commands Common for dev tools. Read the commands it runs.skills/codealive-context-engine/setup.py:204 and 1 more
- Makes network requestsskills/codealive-context-engine/scripts/lib/api_client.py:366, skills/codealive-context-engine/setup.py:243 and 2 more
Web addresses in its code:
- app.codealive.aiskills/codealive-context-engine/scripts/datasources.py:57
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Nothing from another maker does quite the same job yet.