knowledge-repo-init — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited knowledge-repo-init (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Sets up an optional knowledge/documentation repo paired with this Bridge instance. Bridge works without one — this skill is for users who have outgrown a flat work/log.md and want a durable place for protocols, decisions, and customer documentation.
Pattern overview: docs/knowledge-repo-pattern.md — read it first if you're unsure whether you want this. The wizard itself does not repeat the pattern explanation; it executes it.
The wizard performs filesystem writes (creates folders, copies templates) and edits Bridge configs (ecosystem.yaml, workflow/contexts/<slug>.yaml). It does not touch your knowledge repo's Git history without confirmation. Every destructive or externally-visible step is gated by an explicit [y] prompt.
| Phase | Question | Default |
|---|---|---|
| 0 | What's the state? new repo / existing repo / both | — |
| 1 | Slug + display name + (optional) org | — |
| 2 | Path on disk + remote URL (if any) | local-only OK |
| 3 | Top-level areas (customers/internal/leads/partners/projects) | internal/ |
| 4 | Dual-doku contract for any area? | no |
| 5 | Bridge integration: register in ecosystem.yaml? | yes |
| 6 | Scaffold a starter project folder? | optional |
| 7 | Commit + push? | confirm |
Use AskUserQuestion for branching choices. Bundle related fields into the same prompt when they're not branching (slug + display name + org together, areas as multi-select).
Ask:
Do you already have a knowledge repo, or are we creating one fresh? [1] Fresh — create a new directory + (optional) GitHub repo [2] Existing — wire up a repo that already lives somewhere on disk [3] Both — point at an existing folder AND scaffold a new project inside it
For [1] and [3], the wizard will create folders and write files. For [2], the wizard reads the existing layout and only proposes template additions — it never overwrites existing files.
If [2] and the directory doesn't contain a single markdown file with frontmatter, warn the user that the pattern assumes structured markdown and ask whether to proceed.
Bundle:
Validation: slug must match [a-z0-9-]+ and not collide with an existing entry in ecosystem.yaml.
Ask for:
${projects_root}/<slug> if projects_rootis set in bridge-config.yaml, else ~/Developer/<slug>
If the local path exists and is non-empty, switch to existing-repo mode (Phase 0 → [2]).
If creating fresh, run:
mkdir -p "$path" && cd "$path" && git init -b mainOnly after the user confirms the resolved path.
Multi-select prompt:
Which top-level areas should the repo have? (pick all that apply) [ ] customers/ — per-customer documentation [ ] internal/ — internal projects, organisation, services [ ] leads/ — sales pipeline / prospects [ ] partners/ — partner / vendor docs [ ] projects/ — flat project list (no per-area split)
For each selected area, scaffold:
<repo>/<area>/
├── index.md # from docs/examples/knowledge-repo/project-template/index.md, retitled
└── (no _MOC.md yet — created on demand at 5+ files)Ask per-area:
Should every touchpoint in this area require BOTH a GitHub issue AND a knowledge-repo markdown file? [y] Yes — set up dual-doku contract (recommended for paying customers) [n] No — knowledge-repo writes only
If yes, the wizard will later (Phase 5) include the dual_doku.required: true block in the matching workflow/contexts/<slug>.yaml.
Skip this prompt if the user selected only internal/ or leads/.
Two sub-steps, both opt-in:
ecosystem.yamlAppend under a top-level group (default base: for general-purpose knowledge repos, or customers: / partners: if the repo is domain-specific):
<slug>:
github: <org>/<slug> # omit if local-only
description: "<one-line description>"
type: docs
areas: # only the ones picked in Phase 3
<area-1>: "<area-1>/"
<area-2>: "<area-2>/"
templates_dir: "templates/"
standards_dir: "standards/" # if user wants a conventions folderShow the diff before writing.
workflow/contexts/<slug>.yamlOnly if the user wants per-context routing right away. Copy workflow/contexts/_template.yaml to workflow/contexts/<slug>.yaml and pre-fill from the answers so far. Uncomment the sync.wiki.* block. If Phase 4 said yes for any area, set sync.dual_doku.required: true.
This step can be deferred — the user can run /bridge-onboard reconfigure or hand-edit later. Default: defer.
If the user wants a first concrete project to start writing into:
docs/examples/knowledge-repo/project-template/ to<repo>/<area>/<area-slug>/projects/<project-slug>/
{{Project Name}} / {{YYYY-MM-DD}} placeholders in thecopied files
index.mdIn the knowledge repo:
cd <knowledge-repo>
git add -A
git commit -m "chore: initial scaffold from knowledge-repo-init"
# only if remote was set in Phase 2:
git remote add origin <remote-url> # (idempotent — skip if already set)
git push -u origin mainIn the Bridge repo (this one):
cd <bridge-root>
git add ecosystem.yaml workflow/contexts/<slug>.yaml # only the touched ones
git commit -m "chore(<slug>): register knowledge repo"
# do NOT auto-push — the Bridge has CORE/USER branch rules; leave that
# to the user (they may want to /bridge-sync or just push user/<name>).Confirm each git push separately.
let the user apply them manually if they want
summary: / type: / last_updated: triplet is mandatory)
A short summary:
✓ Knowledge repo: <slug> @ <path>
Areas: <area-1>, <area-2>
Dual-doku: <area-1>: yes / <area-2>: no
Registered in: ecosystem.yaml
Context file: workflow/contexts/<slug>.yaml (or deferred)
First project: <area>/<slug>/projects/<project>/ (or none)
Next steps:
1. Read docs/knowledge-repo-pattern.md if you haven't yet
2. Start writing into <repo>/<area>/<slug>/
3. Run /bridge-sync at end-of-sprint to push Bridge changes upstreamfile directly. This skill is for first-time setup.
reconfigure`. This skill assumes the Bridge is already configured.
not covered here. Read the pattern doc, then move content manually.
— the conceptual overview this skill implements.
— the templates this skill copies.
— the context schema the wizard pre-fills.
— the resolver that honors sync.wiki.* and dual_doku.required.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.