# Ontoly Software Graph

Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills...

- Repository: https://github.com/hashgraph-online/awesome-codex-plugins (1479 stars)
- Category: Security
- License: Apache-2.0
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add hashgraph-online/awesome-codex-plugins --skill ontoly-software-graph -g -a claude-code -y`
Codex: `npx skills add hashgraph-online/awesome-codex-plugins --skill ontoly-software-graph -g -a codex -y`
Cursor: `npx skills add hashgraph-online/awesome-codex-plugins --skill ontoly-software-graph -g -a cursor -y`
Gemini CLI: `npx skills add hashgraph-online/awesome-codex-plugins --skill ontoly-software-graph -g -a gemini-cli -y`

## Description

Use Ontoly Software Graph evidence, CLI reports, MCP, and official Ontoly Agent Skills before searching source files when reviewing architecture, dependencies, request flows, configuration, impact, or security-sensitive ownership.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Ontoly Software Graph

Use this skill when the user asks Codex to understand a TypeScript repository's architecture, dependency graph, request flow, service ownership, configuration usage, impact radius, package topology, or security-sensitive code paths.

Ontoly is a deterministic Software Graph compiler. It does not answer questions with AI. It builds graph evidence that Codex can query before falling back to source search.

## Workflow

1. Check whether `.ontoly/SoftwareGraph.json` exists.
2. If the graph is missing or stale, ask before installing dependencies or writing generated graph files. Then run:

   ```bash
   pnpm add -D @0xsarwagya/ontoly-cli
   pnpm ontoly build .
   ```

3. Inspect graph quality before answering:

   ```bash
   pnpm ontoly coverage .
   pnpm ontoly stats .
   ```

4. Prefer Ontoly graph queries before repository-wide source search:

   ```bash
   pnpm ontoly architecture --json
   pnpm ontoly report dependencies --format markdown
   pnpm ontoly report routes --format markdown
   pnpm ontoly query impact <node-id>
   pnpm ontoly trace <node-id-or-name>
   ```

5. Start Ontoly MCP when the environment supports MCP-backed tools:

   ```bash
   pnpm ontoly mcp
   ```

6. Use source files only when the graph is missing, stale, low confidence, or insufficient for the question.

## Common Questions

- "Explain this repository."
- "Which service owns authentication?"
- "Trace the login flow."
- "What breaks if I remove this repository/service/function?"
- "Which packages depend on this module?"
- "Where is this environment variable read?"
- "Which routes are protected by auth?"

## Evidence Rules

When answering, cite graph evidence:

- graph hash
- node ids
- relationship types
- source spans when available
- diagnostics or confidence warnings
- fallback reason if source files were inspected

Never claim certainty beyond Ontoly evidence. If graph coverage is incomplete, say exactly which part is inferred or unresolved.

The rest: https://github.com/hashgraph-online/awesome-codex-plugins/blob/HEAD/plugins/0xsarwagya/ontoly-codex-plugin/skills/ontoly-software-graph/SKILL.md