← Back to search Server uses network capabilities via: urllib Server uses filesystem capabilities via: open(), os, pathlib, tempfile Server uses shell capabilities via: subprocess
io.github.blackwell-systems/knowing
Content-addressed code graph with 22 MCP tools for AI agents.
B
75.7 / 100
Versions
0.1.2latestfirst seen Jun 5, 2026
0.4.0first seen May 19, 2026
Tools 1
trace_stats annotations: none low
Get aggregate statistics about runtime-derived edges, including counts of active, stale, and GC-eligible edges by type.
Permissions 3
network medium filesystem low shell high Scan Findings 82
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-45gg-vh54-h5m9)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-5cgq-3rg8-m6cv)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-78mq-xcr3-xm33)
low
Tool 'trace_stats' has no annotations
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 70 direct dependencies
medium
Vulnerable dependency: vite@5.4.21 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@5.4.21 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@5.4.21 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: golang.org/x/mod@0.36.0 (GO-2026-6179)
medium
Vulnerable dependency: golang.org/x/mod@0.36.0 (GO-2026-6180)
medium
Vulnerable dependency: google.golang.org/grpc@1.81.1 (GHSA-hrxh-6v49-42gf)
medium
Vulnerable dependency: google.golang.org/grpc@1.81.1 (GO-2026-6061)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-89gr-r52h-f8rx)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-9m57-25v3-79x9)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-f5wc-c3c7-36mc)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-jppx-rxg9-jmrx)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-q4h4-gmj2-qvw2)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-qpw4-5x99-6vjp)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-rm3j-f69w-wqmq)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-vgwf-h737-ff37)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-w879-237q-wc7r)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-x527-x647-q7gg)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5005)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5006)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5013)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5014)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5015)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5016)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5017)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5018)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5019)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5020)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5021)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5023)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5033)
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5932)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GHSA-q675-qj96-32m9)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-4961)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5031)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5032)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5061)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5062)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5066)
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-6222)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GHSA-5cv4-jp36-h3mw)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5025)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5026)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5027)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5028)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5029)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5030)
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5942)
medium
Vulnerable dependency: golang.org/x/text@0.37.0 (GO-2026-5970)
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/context_handlers_test.go:221
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/feedback.go:19
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/ownership.go:21
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/audit.go:222
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:386
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:403
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:411
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:412
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:420
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:429
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:437
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:438
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:446
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:447
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:455
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:456
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:464
info
package.json metadata
info
pyproject.toml metadata
info
Tool: trace_stats
info
Transport: stdio
info
Required env vars (37)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
info
SBOM generated: 178 components
medium
No build provenance detected (SLSA L0)