Agent Knowledge

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  bench/promote-bench.ts, line 245

  if (backup.cursorExisted) fs.unlinkSync(cursorFile);

  bench/promote-bench.ts, line 255

  fs.unlinkSync(cursorFile);

  bench/promote-bench.ts, line 260

  if (fs.existsSync(file)) fs.unlinkSync(file);

  Show more

  bench/promote-bench.ts, line 274

  fs.unlinkSync(full);

  src/knowledge/store.ts, line 269

  fs.unlinkSync(filePath);

• Install and update

  Concern

  runs a script at install time.

  INSTALL_LIFECYCLE_HOOK

  package.json, line 56

  prepare

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  bench/longmemeval.ts, line 24

  * curl -L -o ~/.claude/tmp/longmemeval/longmemeval_s_cleaned.json \

  bench/longmemeval.ts, line 84

  ' curl -L -o ~/.claude/tmp/longmemeval/longmemeval_s_cleaned.json \\\n https://huggingface.co/datasets/xiaowu0162/longmemeval-cleaned/resolve/main/longmemeval_s_cleaned.json',

  scripts/plugins/opencode/agent-knowledge.ts, line 128

  const resp = await fetch(url, { signal: AbortSignal.timeout(3000) });

  Show more

  src/embeddings/anthropic.ts, line 61

  const response = await fetch(ENDPOINT, {

  src/embeddings/gemini.ts, line 66

  const response = await fetch(this.endpoint, {

  src/embeddings/openai.ts, line 56

  const response = await fetch(ENDPOINT, {

  src/ui/app.js, line 121

  ws = new WebSocket(`${proto}://${K._wsUrl || location.host}`);

  src/ui/render-graph.js, line 337

  var resp = await fetch(baseUrl + '/api/knowledge/graph-data');

  src/ui/render-graph.js, line 341

  var er = await fetch(baseUrl + '/api/knowledge');

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  src/embeddings/anthropic.ts, line 21

  this.apiKey = process.env.VOYAGE_API_KEY || apiKey;

  src/embeddings/types.ts, line 47

  openaiApiKey: process.env.AGENT_KNOWLEDGE_OPENAI_API_KEY || process.env.OPENAI_API_KEY,

  src/embeddings/types.ts, line 48

  anthropicApiKey: process.env.AGENT_KNOWLEDGE_ANTHROPIC_API_KEY || process.env.ANTHROPIC_API_KEY,

  Show more

  src/embeddings/types.ts, line 49

  geminiApiKey: process.env.AGENT_KNOWLEDGE_GEMINI_API_KEY || process.env.GEMINI_API_KEY,

  src/knowledge/distill.ts, line 71

  // .env style secrets

  src/knowledge/git.ts, line 91

  .env

  src/knowledge/git.ts, line 92

  .env.*

  src/sessions/scopes.ts, line 46

  /\b(config|settings|\.env|\.json|\.yaml|\.yml|\.toml|tsconfig|package\.json|webpack|vite|eslint|prettier|docker|compose|nginx)\b/i,

  .gitignore, line 10

  *.db-shm

  .gitignore, line 11

  .env

  CHANGELOG.md, line 193

  - `src/knowledge/query-log.ts` - lightweight `query_log` table inside `knowledge-scores.db`. `knowledge_search` calls are logged with `{query, project, results_count, created_at}`;

  docs/ARCHITECTURE.md, line 245

  Lightweight `query_log` table inside `knowledge-scores.db`. Every `knowledge_search` call is logged with `{query, project, results_count, created_at}`; obvious-secret patterns (API

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit ea1f331375db. can delete files. runs a script at install time. can reach a host that is not written as a fixed address. reads a credential or environment file.

Date and source

Date checked: 20 Oct 2026

Read how this letter is chosen