knowledge-graph — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited knowledge-graph (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Transform any codebase into a queryable knowledge graph using codebase-memory MCP server. Instead of reading entire files, query the graph for exactly the context you need.
Token savings: 6-71x reduction compared to raw file reading.
~/bin/codebase-memory-mcp or via npm)~/.mcp.json:{
"mcpServers": {
"codebase-memory": {
"command": "/path/to/codebase-memory-mcp",
"args": []
}
}
}mcp__codebase-memory__index_repository
project_name: "my-project"
repo_path: "/path/to/repo"First index takes 30-120s depending on repo size. Subsequent updates are incremental.
mcp__codebase-memory__index_status
project_name: "my-project"mcp__codebase-memory__search_code
project_name: "my-project"
query: "authentication middleware"Returns relevant code snippets without reading entire files.
mcp__codebase-memory__get_architecture
project_name: "my-project"Returns high-level architecture: modules, dependencies, entry points.
mcp__codebase-memory__trace_call_path
project_name: "my-project"
from_symbol: "handleLogin"
to_symbol: "validateToken"mcp__codebase-memory__query_graph
project_name: "my-project"
query: "what depends on auth module?"| Scenario | Without Graph | With Graph |
|---|---|---|
| Code review | Read all changed files + imports | Query impact of changes |
| Bug investigation | Read 10-20 files manually | Trace call path to bug |
| Refactoring | Read entire module | Query all dependents |
| Architecture review | Read project top-down | Get architecture overview |
Before reviewing, query the graph for the blast radius of changes:
search_code("functions that call {changed_function}")Get architecture overview before proposing changes:
get_architecture("project")Trace call paths to understand bug propagation:
trace_call_path("buggy_function", "entry_point")| Operation | Raw Reading | Graph Query | Savings |
|---|---|---|---|
| Find all callers of function | ~50K tokens | ~700 tokens | 71x |
| Architecture overview | ~200K tokens | ~3K tokens | 67x |
| Impact analysis for PR | ~30K tokens | ~2K tokens | 15x |
| Find related tests | ~20K tokens | ~1.5K tokens | 13x |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.