Skills knowledge-base

📦

knowledge-base

Name: knowledge-base
Author: Dwsy

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access

Build Structured Project Knowledge Bases

Project knowledge becomes scattered across code, reviews, and private memory. This skill creates structured Markdown concepts, guides, decisions, indexes, and glossaries.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "knowledge-base" from https://skillstore.io/skills/dwsy-knowledge-base.md and its manifest at https://skillstore.io/api/skills/dwsy-knowledge-base/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/dwsy-knowledge-base.md Signed manifest GET /api/skills/dwsy-knowledge-base/manifest Signed lockfile GET /api/skills/dwsy-knowledge-base/lockfile

Test it

Using "knowledge-base". Initialize project knowledge documents.

Expected outcome:

The skill creates concepts, guides, decisions, external references, and an index under docs/knowledge.

Using "knowledge-base". Discover documentation gaps for a web application.

Expected outcome:

The skill lists detected technical directories and suggests concept and guide topics for each area.

Using "knowledge-base". Search for authentication knowledge.

Expected outcome:

The skill prints matching knowledge files with short line context for each match.

Security Audit

High Risk

v8 • 7/6/2026 Open versioned report

Most static findings are false positives from TypeScript template literals, Markdown command examples, hidden-directory examples, and high-entropy Chinese text. No prompt injection or active child_process execution was found, but decision names are not path-sanitized before writeFile.

Files scanned

1,224

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

lib.ts:236-249

Unsanitized Decision Filename Path Traversal

The decision creation path builds finalFilename from the user supplied name after only replacing spaces, then passes it to join and writeFile. A crafted name with path separators and dot segments can write outside the decisions directory.

The concept and guide branches sanitize file names, but the decision branch leaves slashes and dot segments in the name. The unsanitized value reaches targetPath and writeFile in the same branch.

Risk Factors

⚙️ External commands (96)

lib.ts:4 lib.ts:113 lib.ts:117 lib.ts:124 lib.ts:131 lib.ts:132 lib.ts:188 lib.ts:190 lib.ts:194 lib.ts:197 lib.ts:219 lib.ts:229 lib.ts:237 lib.ts:241 lib.ts:250 lib.ts:257 lib.ts:266 lib.ts:280 lib.ts:317 lib.ts:329 lib.ts:331 lib.ts:339 lib.ts:396 lib.ts:401 lib.ts:406 lib.ts:416 lib.ts:434 lib.ts:439 lib.ts:528 lib.ts:529 lib.ts:530 lib.ts:531 lib.ts:534 lib.ts:535 lib.ts:536 lib.ts:538 lib.ts:539 lib.ts:540 lib.ts:541 lib.ts:548 lib.ts:549 lib.ts:550 lib.ts:551 lib.ts:552 lib.ts:555 lib.ts:557 lib.ts:558 lib.ts:559-560 lib.ts:560 lib.ts:565 lib.ts:567 lib.ts:568 lib.ts:569-570 lib.ts:570 lib.ts:575 lib.ts:580 lib.ts:581 lib.ts:582 lib.ts:589 lib.ts:590 lib.ts:591 lib.ts:592 lib.ts:594 lib.ts:595 lib.ts:596 lib.ts:597 lib.ts:601 lib.ts:602 lib.ts:614 lib.ts:615 lib.ts:616 lib.ts:621 lib.ts:622 lib.ts:629 lib.ts:630 lib.ts:631 lib.ts:632 lib.ts:633 lib.ts:635 lib.ts:666-689 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:32-71 SKILL.md:71-77 SKILL.md:77-112 SKILL.md:112-116 SKILL.md:116-117 SKILL.md:117-119 SKILL.md:119-121 SKILL.md:121-129 SKILL.md:129-131 SKILL.md:131-132 SKILL.md:132 SKILL.md:138-139 SKILL.md:139-140

📁 Filesystem access (89)

lib.ts:140 lib.ts:416 lib.ts:455 lib.ts:194 lib.ts:559 lib.ts:569 lib.ts:589 lib.ts:596 lib.ts:194 lib.ts:559 lib.ts:569 lib.ts:589 lib.ts:596 README.md:27 README.md:45 README.md:48 README.md:49 README.md:52 README.md:53 README.md:54 README.md:57 README.md:58 README.md:59 README.md:60 README.md:66 README.md:74 README.md:89 README.md:95 README.md:207 README.md:239 README.md:245 README.md:248 README.md:27 README.md:45 README.md:48 README.md:49 README.md:52 README.md:53 README.md:54 README.md:57 README.md:58 README.md:59 README.md:60 README.md:66 README.md:74 README.md:89 README.md:95 README.md:207 README.md:239 README.md:245 README.md:248 SKILL.md:26 SKILL.md:27 SKILL.md:79 SKILL.md:82 SKILL.md:85 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:91 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:102 SKILL.md:105 SKILL.md:108 SKILL.md:111 SKILL.md:26 SKILL.md:27 SKILL.md:79 SKILL.md:82 SKILL.md:85 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:91 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:102 SKILL.md:105 SKILL.md:108 SKILL.md:111

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/dwsy-knowledge-base/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/dwsy-knowledge-base/security.svg)](https://skillstore.io/skills/dwsy-knowledge-base?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/dwsy-knowledge-base?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dwsy-knowledge-base/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/dwsy-knowledge-base.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Dwsy. (2026). knowledge-base security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dwsy-knowledge-base/audits/8

BibTeX citation

@techreport{dwsy-dwsy-knowledge-base-2026,
  author = {Dwsy},
  title = {knowledge-base security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/dwsy-knowledge-base/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "knowledge-base security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "Dwsy"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/dwsy-knowledge-base/audits/8"
identifiers:
  - type: other
    value: "skillstore:dwsy-knowledge-base:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Onboard New Engineers

Create a readable map of project concepts, guides, and decisions for new team members.

Capture Domain Language

Turn recurring terms, abbreviations, and business rules into stable concept documents.

Review Documentation Gaps

Discover common project directories and generate a checklist of missing knowledge articles.

Try These Prompts

Initialize a Knowledge Base

Use the knowledge-base skill to initialize docs/knowledge for this project, then summarize the folders it created.

Create a Concept Entry

Create a concept document for [term] in [category]. Include a clear definition, context, misconceptions, and references.

Find Documentation Gaps

Run discovery for this repository and identify the highest value concept and guide documents to add first.

Build an Onboarding Map

Scan the repository, generate suggested concepts, update the index, and produce a short onboarding reading path.

Best Practices

Review generated suggestions before creating documents.
Keep concept definitions short, direct, and tied to project usage.
Regenerate the index and glossary after meaningful documentation changes.

Avoid

Do not treat scan output as complete domain analysis.
Do not use untrusted text directly in file names.
Do not store secrets or private customer data in generated documentation.

Frequently Asked Questions

Does this skill change existing documents?

It refuses to create a document when the target file already exists. Index and glossary commands overwrite generated files.

Which runtime does it need?

The documented commands use Bun to run the TypeScript script.

Can it scan every programming language?

No. The scanner checks selected source extensions and looks for common type and class declarations.

Does the script make network requests?

No network request is implemented in lib.ts. External references are managed as Markdown knowledge entries.

Can I use it with Claude, Codex, and Claude Code?

Yes. The skill metadata marks Claude, Codex, and Claude Code as supported tools.

What should I review before publishing generated docs?

Review file paths, suggested topics, and any sensitive project details before committing generated documents.

Developer Details

Author

Dwsy

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Dwsy/knowledge-base-skill/tree/main/

Ref

72d5025b022c77f7a51bdf5c1637c689c80e89d1

Maintenance freshness

7/22/2026

Usage

7 downloads · 213 views

File structure

📁 templates/

📄 concept-template.md

📄 decision-template.md

📄 guide-template.md

📄 lib.ts

📄 LICENSE

📄 README.md

📄 SKILL.md