tokenknows-distill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tokenknows-distill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
把研发会话沉淀成结构化知识资产。工具来自 tokenknows MCP server(在 ~/.codex/config.toml 的 [mcp_servers.tokenknows] 配置)。
| type | 用途 |
|---|---|
weekly_report | 本周进展 / Bug / 决策 / 风险 / 下周计划 |
tech_design | 技术方案 6 部分 |
adr | 架构决策记录 |
incident | 问题复盘 |
book | 长文档 (卷-章-节) |
agent_skill | 蒸馏可复用 SKILL.md (需主题 topic_hint) |
knowledge_graph | 实体关系图谱 |
mcp__tokenknows__submit_session_events):把当前会话的关键 turn 提交到 TokenKnows,作为蒸馏素材。
mcp__tokenknows__distill_document):传 type (上表之一) + 可选 time_window (this_week / last_7_days / last_14_days / last_30_days)。 agent_skill 类型必须带 topic_hint (单一主题,否则蒸不出可用 skill)。
mcp__tokenknows__list_assets → mcp__tokenknows__get_asset →mcp__tokenknows__get_asset_chapters): 告诉用户文档已生成,给出 asset 标题 + view_url(绝对 URL,前缀由 TOKENKNOWS_WEB_BASE 决定,默认 http://127.0.0.1:5173;登录 Web 工作台后查看/编辑/发布)。
distill_document(type="knowledge_graph", time_window="last_14_days") → 返回 asset → get_asset_chapters 拿图谱节点/边 → 转述给用户。http://127.0.0.1:8001),后端必须在跑。后端不通 / 401 缺 token / 404 项目不存在时,工具会返回带修复指引的双语错误信息 — 原样转述给用户即可。distill_document 立即返回 generating 态,稍后 get_asset 轮询到 draft。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.