tokenknows-knowledge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tokenknows-knowledge (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
查询跨会话沉淀的项目知识资产。工具来自 tokenknows MCP server。
mcp__tokenknows__list_assets):按 type / 时间窗筛选项目里已蒸馏的文档 (周报 / ADR / KG / ...)。
mcp__tokenknows__get_asset + mcp__tokenknows__get_asset_chapters):拿到某份文档的章节正文 + 证据链。
mcp__tokenknows__search_entity):传 query (+ 可选 entity_type: person / concept / artifact / event), 在知识图谱里找实体 + 它出现在哪些文档。
search_entity("数据库选型") 或list_assets(type="adr") 找到真实 ADR 再答,带出处。
search_entity(query="ClickHouse") → 返回相关实体 + 所在 ADR/KG → 给用户带链接的答案。http://127.0.0.1:8001) 在跑。后端不通 / 401 / 404 时,工具错误信息已含修复指引,原样转述给用户即可。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.