K

Knowledge Loom

mike-xiao/knowledge-loom · v0.10.0 · Development & Workflow

by Mike XiaoOwner verifiedScan grade: review

Agent-neutral skills for initializing, auditing, using, and maintaining governed local Markdown knowledge vaults across Agent Skills-compatible runtimes

InstallSource
Follow0
Trust Score75Security scan76Components5
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Knowledge Loom a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • Claude Code
  • 5 skills

Before you install

Sign-in
Not declared
Declared access
Read, Write
License
MIT

Check before relying on it

What is Knowledge Loom?

Knowledge Loom is a published development & workflow plugin for AI coding agents that works with Codex and Claude Code, developed by Mike Xiao and distributed through the HOL AI plugin registry. Agent-neutral skills for initializing, auditing, using, and maintaining governed local Markdown knowledge vaults across Agent Skills-compatible runtimes.

Canonical slug
mike-xiao/knowledge-loom
Version
v0.10.0 · updated Sep 30, 2026

Registry snapshot

Owner verification
Verified on HOL as @magickaichen
Scanner
Registry fallback scan
Security result
Needs review
Digest verified
Yes
5 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
75

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
76/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
76/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/magickaichen/knowledge-loom
Source commit
9fed6a23d5c3…
Publisher verified
Yes
Owner verified
@magickaichen

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
76
Security score
0
High findings
Provider
registry-broker-fallback
Grade
C · review
Version
Unknown
cisco-skill-scanner: unknown

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Find the marketplace and plugin names

    The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.

    shell
  3. 3

    Install the plugin

    Substitute the plugin entry name and the marketplace name shown by the previous step.

    claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "knowledge-loom",
  "version": "0.10.0",
  "description": "Governed local Markdown knowledge vault workflows",
  "author": {
    "name": "Mike Xiao",
    "url": "https://github.com/magickaichen"
  },
  "homepage": "https://github.com/magickaichen/knowledge-loom",
  "repository": "https://github.com/magickaichen/knowledge-loom",
  "license": "MIT",
  "keywords": [
    "knowledge",
    "markdown",
    "vault",
    "context",
    "governance"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Knowledge Loom",
    "developerName": "Mike Xiao",
    "shortDescription": "Govern local Markdown knowledge vaults.",
    "longDescription": "Initialize, audit, use, and maintain bounded focus views in governed local Markdown knowledge vaults.",
    "category": "Productivity",
    "capabilities": [
      "Read",
      "Write",
      "Local files"
    ],
    "websiteURL": "https://github.com/magickaichen/knowledge-loom",
    "defaultPrompt": [
      "Audit this knowledge vault without changing it.",
      "Use the relevant vault context for this task.",
      "Initialize a governed Markdown knowledge vault."
    ]
  },
  "registryIndexVersion": 5
}

Marketplace source

Repo URL
https://github.com/magickaichen/knowledge-loom
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

5 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • knowledge-loom

    adapters/claude-desktop/knowledge-loom/SKILL.md

    Use one connected governed Markdown vault in Claude Cowork. Retrieve targeted context, respect subject and write boundaries, audit policy, and maintain a bounded focus view.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • audit-knowledge-vault

    skills/audit-knowledge-vault/SKILL.md

    Audit one governed Markdown vault without modifying it. Use for contract, registry, metadata, subject, focus, privacy, Git, content-check, link, or lifecycle validation.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • init-knowledge-vault

    skills/init-knowledge-vault/SKILL.md

    Set up a governed Markdown vault that is useful immediately by organizing existing authorized work; also conservatively adopt, register, or associate an existing vault.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • manage-current-focus

    skills/manage-current-focus/SKILL.md

    Prioritize or update one declared current-focus view in a governed vault. Use to accept, complete, block, defer, or reorder commitments, or reconcile sourced status with current attention.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • use-knowledge-vault

    skills/use-knowledge-vault/SKILL.md

    Invoke before substantive work in a vault-linked directory, where an ancestor contract or project association may apply; this skill call starts vault activation for one governed Markdown vault. Also invoke for explicit requests to consult, remember, update, or sync vault knowledge.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

604 bytes

457d110ec368047b…

.codex-plugin/plugin.json

plugin-manifest

980 bytes

43fdfad85704b979…

adapters/claude-desktop/knowledge-loom/SKILL.md

skill

3,596 bytes

28aa4830e2b58229…

AGENTS.md

file

2,142 bytes

d25e4a19febd9bf1…

CLAUDE.md

file

117 bytes

4fb96e0eb62a92e8…

package-lock.json

file

29,519 bytes

ee71840e0c28250d…

package.json

file

1,612 bytes

9017ceb8e222aeac…

README.md

file

4,618 bytes

5b13a31a02e22804…

SECURITY.md

file

531 bytes

506eb162561d0f11…

skills/audit-knowledge-vault/agents/openai.yaml

skill

205 bytes

7de7bd82e8e581de…

skills/audit-knowledge-vault/licenses/yaml.txt

skill

738 bytes

5bba27375d93e911…

skills/audit-knowledge-vault/references/contract-schema.md

skill

6,555 bytes

d70059ac7a85cce0…

skills/audit-knowledge-vault/references/protocol.md

skill

17,594 bytes

51ee8dc8944daefd…

skills/audit-knowledge-vault/references/synchronization.md

skill

7,419 bytes

73e49baa674ad2b7…

skills/audit-knowledge-vault/scripts/knowledge-loom.mjs

skill

365,245 bytes

0b2a678abf5fde6b…

skills/audit-knowledge-vault/SKILL.md

skill

3,034 bytes

4635a760600cb074…

skills/init-knowledge-vault/agents/openai.yaml

skill

204 bytes

7fa965d3f9470e5c…

skills/init-knowledge-vault/licenses/yaml.txt

skill

738 bytes

5bba27375d93e911…

skills/init-knowledge-vault/references/contract-schema.md

skill

6,555 bytes

d70059ac7a85cce0…

skills/init-knowledge-vault/references/protocol.md

skill

17,594 bytes

51ee8dc8944daefd…

skills/init-knowledge-vault/references/synchronization.md

skill

7,419 bytes

73e49baa674ad2b7…

skills/init-knowledge-vault/scripts/knowledge-loom.mjs

skill

365,245 bytes

0b2a678abf5fde6b…

skills/init-knowledge-vault/SKILL.md

skill

3,130 bytes

0ca8754a9b377eba…

skills/manage-current-focus/agents/openai.yaml

skill

237 bytes

d3376811b1bed559…

skills/manage-current-focus/licenses/yaml.txt

skill

738 bytes

5bba27375d93e911…

skills/manage-current-focus/references/protocol.md

skill

17,594 bytes

51ee8dc8944daefd…

skills/manage-current-focus/references/synchronization.md

skill

7,419 bytes

73e49baa674ad2b7…

skills/manage-current-focus/scripts/knowledge-loom.mjs

skill

365,245 bytes

0b2a678abf5fde6b…

skills/manage-current-focus/SKILL.md

skill

3,960 bytes

3c9cf4f1f5bd792d…

skills/use-knowledge-vault/agents/openai.yaml

skill

253 bytes

d9b68e19fdbd5b2f…

skills/use-knowledge-vault/licenses/yaml.txt

skill

738 bytes

5bba27375d93e911…

skills/use-knowledge-vault/references/protocol.md

skill

17,594 bytes

51ee8dc8944daefd…

skills/use-knowledge-vault/references/synchronization.md

skill

7,419 bytes

73e49baa674ad2b7…

skills/use-knowledge-vault/scripts/knowledge-loom.mjs

skill

365,245 bytes

0b2a678abf5fde6b…

skills/use-knowledge-vault/SKILL.md

skill

3,852 bytes

a315ad404f3bca4c…

tsconfig.json

file

492 bytes

a5cd57ba0a1e75c8…

Knowledge Loom — Frequently asked questions

What is Knowledge Loom?
Knowledge Loom is an AI plugin in the HOL registry. Agent-neutral skills for initializing, auditing, using, and maintaining governed local Markdown knowledge vaults across Agent Skills-compatible runtimes.
How do I install Knowledge Loom?
Install Knowledge Loom in your harness: Codex — codex plugin marketplace add magickaichen/knowledge-loom; Claude Code — /plugin marketplace add magickaichen/knowledge-loom; Any agent — npx [email protected] add magickaichen/knowledge-loom. Full step-by-step guidance is on the HOL plugin page.
How do I install Knowledge Loom in Codex?
To install Knowledge Loom in Codex, start with codex plugin marketplace add magickaichen/knowledge-loom. The complete step-by-step install guide for Codex is on the HOL plugin page.
How do I install Knowledge Loom in Claude Code?
To install Knowledge Loom in Claude Code, start with /plugin marketplace add magickaichen/knowledge-loom. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for Knowledge Loom computed?
Knowledge Loom has a HOL Trust Score of 75 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/mike-xiao%2Fknowledge-loom/trust
Who publishes Knowledge Loom?
Knowledge Loom is published by Mike Xiao and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W43. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-10-06 to 2026-10-31.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Knowledge Loom.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins