← Back to search

io.github.blackwell-systems/knowing

blackwell-systems Scanned 20d ago

Content-addressed code graph with 22 MCP tools for AI agents.

B
75.7 / 100

Versions

0.1.2latest
first seen Jun 5, 2026
0.4.0
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

trace_stats
annotations: none low

Get aggregate statistics about runtime-derived edges, including counts of active, stale, and GC-eligible edges by type.

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, tempfile
shell high
Server uses shell capabilities via: subprocess

Scan Findings 82

medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-45gg-vh54-h5m9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-5cgq-3rg8-m6cv) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-78mq-xcr3-xm33) dependency_analyzer · 95%
low
Tool 'trace_stats' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 70 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: vite@5.4.21 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.21 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.21 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.36.0 (GO-2026-6179) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.36.0 (GO-2026-6180) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.81.1 (GHSA-hrxh-6v49-42gf) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.81.1 (GO-2026-6061) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-89gr-r52h-f8rx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-9m57-25v3-79x9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-f5wc-c3c7-36mc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-jppx-rxg9-jmrx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-q4h4-gmj2-qvw2) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-qpw4-5x99-6vjp) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-rm3j-f69w-wqmq) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-vgwf-h737-ff37) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-w879-237q-wc7r) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GHSA-x527-x647-q7gg) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5005) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5006) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5013) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5014) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5015) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5016) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5017) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5018) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5019) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5020) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5021) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5023) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5033) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.51.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GHSA-q675-qj96-32m9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-4961) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5031) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5032) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5061) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5062) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-5066) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/image@0.39.0 (GO-2026-6222) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.54.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.37.0 (GO-2026-5970) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/context_handlers_test.go:221 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/feedback.go:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/ownership.go:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/audit.go:222 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:386 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:403 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:411 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:412 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:420 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:429 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:437 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:438 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:446 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:447 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:455 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:456 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in blackwell-systems-knowing-5b7f60a/internal/mcp/server.go:464 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: trace_stats manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (37) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
info
SBOM generated: 178 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%