·
Last changedVersion:
This version passed the hardening gate. Hardening applied 4 targeted changes and preserved all other text. Classified findings before hardening: 7. Classified findings closed: 1. Classified findings remaining: 6. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 13.
1
6
6
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/lint.md | Tool & MCP Manipulation | Unauthorized tool use | High | Closed | |
SKILL.md | Tool & MCP Manipulation | MCP over-permissioning | Medium | Open | |
scripts/tools/graph_store.py | Malicious Code & Command Execution | — | Medium | Open | |
scripts/tools/documents_store.py | Malicious Code & Command Execution | — | Medium | Open | |
scripts/tools/ontology_store.py | Malicious Code & Command Execution | — | Medium | Open | |
scripts/tools/wiki_store.py | Malicious Code & Command Execution | — | Medium | Open | |
scripts/tools/index_store.py | Malicious Code & Command Execution | — | Medium | Open |
7 findings
Standard RAG re-discovers knowledge from scratch on every query. This skill is different:
| Layer | Where | What the LLM does | What Python does |
|---|---|---|---|
Raw Sources |
| Reads (never modifies) | Stores chunks + metadata |
Wiki |
| Writes/updates pages | Manages index.md + log.md |
Graph |
| Extracts entities + relations | Persists, deduplicates, traverses |
A complete runnable version of this workflow is in scripts/template_agent_workflow.py.
When a user provides a new document:
references/ingestion.md — entity/relation extraction rules.references/ontology.md — type normalization rules.skill.ingest_with_content(...) — stores raw content + chunks + graph nodes + provenance.wiki_store.write_page(category="summary", ...).wiki_store.write_page(category="entity", ...).When a user asks a question:
wiki_store.search_wiki(query) to find relevant pages. Read them.skill.query_with_evidence(query).supporting_documents.Periodically health-check the wiki:
Ask the LLM to review and fix: broken links, orphan pages, stale claims, missing cross-references. See references/lint.md for full lint workflow.
supporting_text for every entity and relation — this enables provenance| Method | Purpose | When to Use |
|---|---|---|
| Full RAG ingest: raw docs + graph + provenance | Every new document |
| Add single entity (no provenance) | Quick additions without a source doc |
| Add single relation | Quick additions without a source doc |
| Graph-only retrieval → subgraph | Structural queries |
| Graph + provenance → subgraph + source chunks | Queries requiring citations |
| Write/update a wiki page | After every ingest; after answering queries |
| Read a wiki page | Before answering; for cross-referencing |
| Keyword search across wiki | Fast path before graph traversal |
| List all wiki pages | Getting an overview |
| Read recent operations | Understanding wiki history |
| Health check | Periodic maintenance |
| List all ingested raw sources | Audit / provenance checking |
| Chunk-level search | Finding specific evidence |
| Layer | What Happens | Who Owns It |
|---|---|---|
LLM Reasoning | Extraction, synthesis, writing wiki pages | Agent (.md guidance files) |
Wiki Persistence | Index, log, file I/O |
|
Graph Persistence | Dedup, index, BFS traverse |
|
Raw Source Storage | Immutable docs + chunks + provenance |
|
The human curates sources and asks questions. The LLM writes the wiki, extracts the graph, and answers with citations. Python handles all bookkeeping.
Get started with chainctlchainctl skill install public/github/mini-context-graph:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/mini-context-graph:latest
MIT
HARDENING.md
LICENSE
SKILL.md
references/ingestion.md
references/lint.md
references/ontology.md
references/retrieval.md
scripts/config.py
scripts/contextgraph.py
scripts/template_agent_workflow.py
scripts/tools/__init__.py
scripts/tools/documents_store.py
scripts/tools/graph_store.py
scripts/tools/index_store.py
scripts/tools/ontology_store.py
scripts/tools/retrieval_engine.py
scripts/tools/wiki_store.py