Agent skill · Audited from source

Wegent Knowledge

skill · wecode-ai/WegentApache-2.0 licenceAudited 16 Oct 2026 · source 52a5031418c3

★ 872pushed todayversion 1.1.1
✓SAFEGrade B · 89/100 · 16 Oct 2026 · 52a5031
872repo stars · whole wecode-ai/Wegent

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 52a5031418c3 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Knowledge base management and search tools for Wegent. Provides capabilities to list, create, update, and search knowledge bases and documents using RAG retrieval. Use this skill when the user wants to manage knowledge…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Wegent Knowledge (wecode-ai/Wegent)”. Retrieved 16 Oct 2026. https://modelsatlas.com/skills/wecode-ai/wegent-knowledge

Trust audit

Audit 0.4.1 · source read 16 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high1 medium3 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityWARN3
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS1
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (4)

LOWInventory / provenanceskill.no_frontmatter · SKILL.md:1
F-13 Inventory / provenanceCWE-1104Layer L3
Why
SKILL.md lacks name/description frontmatter
Fix
—

Audit 0.4.1 · source sha 52a5031418c3 · 16 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherwecode-ai GitHub organizationOwner of the repository this skill is read from
  • Source folderwecode-ai/Wegent/backend/init_data/skills/wegent-knowledgeThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdict52a5031418c3A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Knowledge base management and search tools for Wegent. Provides capabilities to list, create, update, and search knowledge bases and documents using RAG retrieval. Use this skill when the user wants to manage knowledge…

---
description: "Knowledge base management and search tools for Wegent. Provides capabilities to list, create, update, and search knowledge bases and documents using RAG retrieval. Use this skill when the user wants to manage knowledge bases, documents, or search for information programmatically."
displayName: "知识库工具"
version: "1.1.1"
author: "Wegent Team"
tags: ["knowledge", "knowledge-base", "document", "rag"]
bindShells:
  - Chat
  - Agno
  - ClaudeCode
mcpServers:
  wegent-knowledge:
    type: streamable-http
    # NOTE: MCP client only supports ${{...}} variable substitution.
    # The platform will inject `backend_url` via task_data.
    url: "${{backend_url}}/mcp/knowledge/sse"
    headers:
      Authorization: "Bearer ${{task_token}}"
    timeout: 300
---

# Wegent Knowledge Base Skill

You now have access to Wegent Knowledge Base management tools.

## Available Tools

- **wegent_kb_list_knowledge_bases**: List all knowledge bases accessible to the current user
  - scope: "personal" (your own), "group" (team), "organization", or "all" (default)
  - group_name: Specify group name when scope="group"
  - limit: Maximum number of knowledge bases to return per page
  - offset: Start offset for paginated listing
  - returns: items, total, returned_count, limit, offset, has_more
  - each item includes namespace_level ("personal", "group", or "organization") and namespace_display_name ("personal", group display name, or organization display name)

- **wegent_kb_list_documents**: List all documents in a knowledge base
  - knowledge_base_id: ID of the knowledge base
  - folder_id: Optional selected folder ID
  - include_subfolders: Whether to include descendant folders (default: true)
  - limit: Maximum number of documents to return per page
  - offset: Start offset for paginated listing
  - returns: items, total, returned_count, limit, offset, has_more

- **wegent_kb_create_knowledge_base**: Create a new knowledge base
  - name: Knowledge base display name
  - description: Optional description
  - namespace: "default" (personal) or a group namespace (requires Maintainer+)
  - kb_type: "notebook" (default) or "classic"
  - summary_enabled: Enable automatic summary generation (default: true)

- **wegent_kb_create_document**: Create a new document in a knowledge base
  - knowledge_base_id: Target knowledge base ID
  - name: Document name
  - source_type: "text" (paste content), "file" (base64 encoded), or "web" (URL to scrape)
  - content: Document content when source_type="text"
  - file_base64: Base64 encoded file when source_type="file"
  - file_extension: File extension when source_type="file"
  - url: URL to fetch when source_type="web"
  - trigger_indexing: Whether to trigger RAG indexing (default: true)
  - trigger_summary: Whether to trigger summary generation (default: true)

- **wegent_kb_read_document_content**: Read raw document content with offset/limit pagination
  - document_id: Document ID to read
  - offset: Character offset to start reading from (default: 0)
  - limit: Maximum number of characters to return (uses the backend default when omitted)
  - returns: content slice, total_length, returned_length, has_more, kb_id

- **wegent_kb_update_document_content**: Update a document's content for text documents and editable plain-text files
  - document_id: Document ID to update
  - content: New content (replaces existing content)
  - trigger_reindex: Whether to trigger RAG re-indexing (default: true)

- **wegent_kb_search_knowledge_base**: Search documents using RAG retrieval
  - knowledge_base_id: Knowledge base ID to search
  - query: Search query text
  - search_hints: Optional query plan. Only use `semantic_query` (string), `keywords` (array of terms), and `phrases` (array of exact multi-word matches). Never use `exact_keywords`.
  - max_results: Maximum results to return (default: 10, max: 50)
  - document_ids: Optional list of document IDs to filter search scope
  - folder_ids: Optional list of selected folder IDs
  - include_subfolders: Whether folder IDs include descendants

## Usage Notes

- All operations inherit the current user's permissions
- For a folder in `<selected_knowledge_sources>`, pass its original ID through `folder_id`/`folder_ids` and set `include_subfolders=true`. A selected folder always includes its entire descendant subtree. Never broaden the request to the whole knowledge base to discover descendants.
- For a selected document, pass its original ID through `document_ids` instead of broadening to the whole knowledge base.
- After creating or updating documents, indexing happens asynchronously
- Documents may show status "pending" until indexing completes
- For web scraping, the URL content is fetched and stored as document content
- `wegent_kb_update_document_content` supports `text` documents and plain-text file documents such as `txt`, `md`, and `markdown`; binary files like `pdf` or `docx` still require creating or replacing the source file instead of inline editing
- Avoid loops: if a tool call fails, report the error once and stop retrying/re-loading the skill unless the user changes inputs.
- Long documents should be read incrementally: start with the backend default limit, then continue with `offset = previous_offset + previous_returned_length` while `has_more=true`

## Example Workflow

1. List documents in a specific knowledge base:
   ```
   wegent_kb_list_documents(knowledge_base_id=123, limit=20, offset=0)
   ```

   If `has_more=true`, continue with:
   ```
   wegent_kb_list_documents(knowledge_base_id=123, limit=20, offset=20)
   ```

2. Create a new knowledge base:
   ```
   wegent_kb_create_knowledge_base(
     name="My KB",
     description="My personal notes",
     namespace="default",
     kb_type="notebook"
   )
   ```

3. Create a new text document:
   ```
   wegent_kb_create_document(
     knowledge_base_id=123,
     name="Meeting Notes",
     source_type="text",
     content="Notes from today's meeting..."
   )
   ```

4. Up

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 52a5031

Download folder ↗
git clone https://github.com/wecode-ai/Wegent
git -C Wegent checkout 52a5031418c3

The author documents no install command, so this uses the repository directly. Our verdict covers commit 52a5031418c3 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 52a5031418c3

Similar skills

Questions about Wegent Knowledge

What does the Wegent Knowledge skill do?
Plan, build, and deliver with an open-source, self-hostable AI workspace for coding, collaboration, and automation.
Is Wegent Knowledge safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Wegent Knowledge access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (52a5031418c3), read on 2026-10-16. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.