autowiki-b10dc2 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited autowiki-b10dc2 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Ingest documents → extract understanding → validate claims → build a reusable KB.
Built on the LLM Wiki pattern (Karpathy) and the EN→PI→R→E loop (ENPIRE/NVIDIA). Works as an Obsidian vault out of the box — open ~/wiki in Obsidian for graph view, wikilinks, and Dataview queries on frontmatter.
See references/ecosystem-survey.md for the competitive landscape (kepano/obsidian-skills, ARIS, karpathy-llm-wiki) and where autowiki fits.
What makes this different: claims are checked against their sources (did we hallucinate?) and against each other (do claims contradict?). Every claim gets a confidence score. Raw sources are sha256-tracked for drift detection.
Default: ~/wiki. Override with WIKI_PATH env var.
EN (Ingestion) → PI (Understanding) → R (Validation) → E (Index)raw/<subdir>/ with frontmatter(source_url, ingested, sha256 of stripped body, type). See references/raw-template.md.
concepts, claims, relationships. Note provenance (line numbers in source).
search_files + index.md) for related pages.references/page-template.md for format.R1 — Source fidelity: For each claim, re-check against raw source. Flag: invented numbers, dropped qualifiers, shifted context.
R2 — Internal consistency: Search KB for contradicting claims. If found: mark contested: true on both pages, set confidence: low, add contradiction section. Do NOT auto-resolve.
R3 — Confidence scoring:
high: 2+ independent sources, no contradictions, fidelity verifiedmedium: single source, no contradictions, fidelity verified (default)low: contradiction exists, fidelity concern, or single-source opinionSee references/validation-example.md for a worked case (ENPIRE "99% success").
index.md (alphabetical, by type).log.md: action, subject, created/updated pages, validation flags.web_extract or pymupdf. Save to raw/papers/.raw/code/<repo>/. Extract module purpose,public API, design patterns. File-level granularity.
error patterns, timing. Detect crash signatures (near-zero eval time).
The KB IS the context management strategy. Never load all documents.
Context at any point: ~6K tokens. Cumulative KB: unlimited.
index.md → identify relevant pages.search_files for key terms.queries/.Mechanical checks (auto-fix): broken wikilinks, index completeness, frontmatter validation, tag taxonomy.
Heuristic checks (report only): contradictions (contested: true), low-confidence pages, orphans, stale content, oversized pages, source drift (recompute sha256 vs stored).
Report grouped by severity: broken links > contradictions > orphans > low confidence > stale > style.
Every wiki includes _navigate.md at its root — a short file any agent can read to learn how to find and use information in the KB. No skill needed.
read_file $WIKI/_navigate.mdFor ingestion with small context windows (<8K tokens), use the two-pass approach in references/micro-skill.md.
See docs/CROSS_AGENT.md for the full multi-agent protocol.
WIKI="${WIKI_PATH:-$HOME/wiki}"
mkdir -p "$WIKI"/{raw/{articles,papers,code,logs,assets},entities,concepts,comparisons,claims,queries}Write SCHEMA.md (ask user for domain), index.md (empty sections), log.md (creation entry).
.strip()'d body — file format inserts newline between --- and body. Drift check must also strip before hashing, otherwise every file shows false-positive drift.grep -r '—' *.md *.py before committing.[email protected]:user/repo.git). Fine-grained tokens don't work for git HTTPS push. Classic tokens need repo + workflow scopes. If token auth fails with "Password authentication is not supported", use SSH or generate a new key with ssh-keygen -t ed25519 and add to github.com/settings/keys.When writing READMEs, project docs, or wiki pages for this user:
No marketing words: \"powerful\", \"comprehensive\", \"seamless\", \"advanced\".
The user wants the lineage visible.
pipeline\" when \"reads PDFs, code, CSVs, logs\" says the same thing.
real commands — not value propositions.
The README rewrite in the initial autowiki session is the reference example: went from \"Self-validating knowledge compiler — ingest heterogeneous documents\" to \"Turn documents into a searchable, cross-referenced knowledge base.\"
The wiki IS an Obsidian vault:
[[wikilinks]] render as clickable linksTABLE tags FROM "entities" WHERE contains(tags, "framework"))raw/assets/ holds images referenced via ![[image.png]]# Agent Skills (Claude Code, Codex, Cursor, Hermes)
npx skills add https://github.com/knefenk/autowiki
# Python package
pip install autowiki
# Hermes-only (no pip — uses scripts/autowiki.py)
cp -r skills/autowiki ~/.hermes/skills/research/autowikiThe Hermes-only path uses scripts/autowiki.py (self-contained, 280 lines) for mechanical operations (chunking, sha256, lint, index rebuild). The LLM handles semantic work. No pip, no external deps — just Python 3.10+.
For mechanical ops, call: python3 scripts/autowiki.py <command> --path ~/wiki where commands are: init, save-raw, validate, chunk, lint, index, search, show, list.
See references/ecosystem-survey.md for the Agent Skills landscape surveyed during development (kepano/obsidian-skills, ARIS, karpathy-llm-wiki).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.