
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@jackwener/llm-wiki
Advanced tools
Agent-native LLM Wiki — AI-maintained knowledge base with Obsidian compatibility
Agent-native persistent knowledge management — compile knowledge once, query forever.
Based on Andrej Karpathy's LLM Wiki pattern.
LLM Wiki is a CLI tool + AI Agent skill system that maintains an evolving, interconnected Markdown knowledge base. Instead of traditional RAG (re-deriving answers from raw documents each time), LLM Wiki compiles knowledge into structured wiki pages that AI agents maintain and grow over time.
Key principle: The tool itself doesn't call LLMs. It provides skill files that let any AI agent (Claude Code, Codex, etc.) operate the wiki. Obsidian is the human interface — no self-built GUI.
# Install globally
npm install -g @jackwener/llm-wiki
# Initialize a new wiki vault
mkdir my-wiki && cd my-wiki
llm-wiki init
# Now use your AI agent:
# /ingest sources/some-article.md
# /query "What do we know about X?"
# /lint
# /research "deep dive on Y"
llm-wiki init is the only setup command — it creates the vault files, the
agent bootstrap files (CLAUDE.md, AGENTS.md), and installs the bundled
skill into .claude/skills/ and .agents/skills/ in one step.
After upgrading the package, refresh the installed skill files with:
llm-wiki skill install
my-wiki/
├── CLAUDE.md # Agent bootstrap for Claude Code (auto-loaded)
├── AGENTS.md # Agent bootstrap for Codex (auto-loaded)
├── wiki-purpose.md # Wiki scope and audience
├── wiki-schema.md # Page types, naming conventions, frontmatter rules
├── wiki-log.md # Append-only operation log
├── wiki/ # AI-maintained wiki pages (Obsidian-compatible)
├── sources/ # Raw, immutable source documents
│ └── YYYY-MM-DD/ # Date-based storage
├── .claude/
│ └── skills/
│ └── llm-wiki.md # Skill file for Claude Code
├── .agents/
│ └── skills/
│ └── llm-wiki.md # Skill file for Codex
└── .llm-wiki/
├── config.toml # Vault configuration
└── sync-state.json # Incremental sync tracking
llm-wiki init generates every file above in one step.
LLM Wiki uses a two-file pattern so any AI agent can operate the vault out of
the box, with no manual setup beyond llm-wiki init:
1. Entry files — CLAUDE.md and AGENTS.md (vault root)
Short bootstrap documents that are auto-loaded on every session start —
Claude Code reads CLAUDE.md, Codex reads AGENTS.md. They tell the agent:
wiki-purpose.md and wiki-schema.md/ingest, /query, /lint, /research commands are available.claude/skills/llm-wiki.md or
.agents/skills/llm-wiki.md)Because they are auto-loaded, they are intentionally small — a few dozen lines — to keep session-start context cheap.
2. Skill file — .claude/skills/llm-wiki.md and .agents/skills/llm-wiki.md
The full agent playbook, loaded on demand when the agent invokes a wiki command. It contains the detailed step-by-step procedure for each operation, page schemas, frontmatter rules, worked examples, and invariants (e.g. the sources/ immutability rule, the wiki-log.md + sync tail rule). The same skill is installed into both platform directories so a single vault works with Claude Code and Codex without reconfiguration.
Upgrading. llm-wiki init is the only setup command — it writes both
entry files and installs the skill. After upgrading the npm package, run
llm-wiki skill install to refresh the skill file. Your edits to
CLAUDE.md / AGENTS.md are preserved across reinstalls.
The skill exposes four operations, each invoked as a slash command:
| Operation | Usage | What it does |
|---|---|---|
| ingest | /ingest <path> | Read source → extract entities → create/update wiki pages with [[wikilinks]] |
| query | /query <question> | Search wiki → synthesize answer → write back valuable insights (knowledge compounding) |
| lint | /lint | Health check: broken links, orphans, contradictions, stale content → auto-fix safe issues |
| research | /research <topic> | Go beyond wiki: search web → save sources → ingest → synthesize report |
| Command | Description |
|---|---|
llm-wiki init [dir] | Initialize a new wiki vault |
llm-wiki search <query> | BM25 keyword search (+ DB9 vector search if configured) |
llm-wiki graph [--json] | Analyze wikilink graph: communities, hubs, orphans, wanted pages |
llm-wiki status | Wiki statistics and health summary |
llm-wiki sync [--dry-run] | Track changes (mtime + SHA256), sync embeddings to DB9 |
llm-wiki skill install | Install all skills to your AI agent workspace |
llm-wiki skill list | List available skills |
llm-wiki skill show <name> | Print skill content to stdout |
BM25 keyword search with CJK bigram tokenization (Chinese/Japanese/Korean support).
When DB9 is configured, search becomes hybrid: BM25 + vector similarity, merged via Reciprocal Rank Fusion (RRF, K=60).
llm-wiki search "distributed consensus"
llm-wiki search "分布式共识" -n 5
llm-wiki search "raft algorithm" --bm25-only
Analyzes the [[wikilink]] graph to find structure in your knowledge:
llm-wiki graph # Human-readable output
llm-wiki graph --json # Machine-readable for programmatic use
DB9 adds vector search and cloud sync:
embedding(text)::vector(1024) — no local model neededEnable by adding to .llm-wiki/config.toml:
[db9]
url = "your-db9-connection-string"
Then run llm-wiki sync to upload embeddings.
The wiki/ directory is a standard Obsidian vault:
[[wikilink]] cross-references.llm-wiki/config.toml:
[vault]
name = "My Wiki"
language = "en"
# Optional: DB9 for vector search + cloud sync
# [db9]
# url = "your-db9-connection-string"
Apache-2.0
FAQs
Agent-native LLM Wiki — AI-maintained knowledge base with Obsidian compatibility
We found that @jackwener/llm-wiki demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.