search-knowledge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited search-knowledge (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Script location. If your host does not set${CLAUDE_PLUGIN_ROOT}, the scripts are in this plugin'sscripts/folder, next toskills/. Run them with Python 3.10 or newer:python, orpython3wherepythonis not found (macOS, many Linux systems).
Semantic search across all stored brand knowledge in the vector database and knowledge graph. Answers questions like "What worked for email in Q4?", "What are our brand voice guidelines?", "Show me learnings about audience X", or "What did we learn about competitor Y's pricing?" Returns relevant entries ranked by similarity with full provenance context, so agents and users can make decisions informed by everything the brand has ever learned — not just what they remember from the current session. Searches all connected memory layers simultaneously: vector DB for semantic similarity, knowledge graph for entity relationships, and local index for un-synced recent entries.
The user must provide (or will be prompted for):
guideline, campaign-learning, competitive-intel, performance-insight, or brand-asset. Omit to search all types. Multiple types can be specified as a comma-separated listhigh for proactively surfaced insights, normal for standard entries, or all (default). Use high when you need only the most impactful learningsfalse. Set to true for historical research where stale knowledge still has archival valuesemantic (default — natural language similarity), exact (keyword match for precise terms like campaign names or metric values), or hybrid (combines both with weighted scoring)~/.claude-marketing/brands/_active-brand.json for the active slug, then load ~/.claude-marketing/brands/{slug}/profile.json. Apply brand voice, compliance rules for target markets (skills/context-engine/compliance-rules.md), and industry context. Also check for guidelines at ~/.claude-marketing/brands/{slug}/guidelines/_manifest.json — if present, load restrictions. Check for agency SOPs at ~/.claude-marketing/sops/. If no brand exists, ask: "Set up a brand first (/digital-marketing-pro:brand-setup)?" — or proceed with defaults.python "${CLAUDE_PLUGIN_ROOT}/scripts/memory-manager.py" --brand {slug} --action get-memory-status to see which memory backends are configured via environment variables (this checks env vars only — it does not test live reachability or capacity). Only query backends you actually have connected: a vector DB (e.g. Pinecone) for semantic similarity, a knowledge-graph server for relationships (if connected), a cross-session store (if connected), and the always-available local index. DMP bundles none of these — the local index always works; the rest are opt-in.memory-manager.py --action search-local to check the local memory index for any entries not yet synced to the vector database. This catches recent session knowledge that was stored locally via /digital-marketing-pro:save-knowledge but not yet pushed to persistent storage via /digital-marketing-pro:sync-memory.A structured search response containing:
/digital-marketing-pro:save-knowledge or data collection~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.