
Research
/Security News
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.
@openbkn/bkn-sdk
Advanced tools
Unified TypeScript SDK + CLI for the BKN (Business Knowledge Network) platform.
Unified TypeScript SDK + CLI for the BKN (Business Knowledge Network) platform.
One toolkit, two surfaces: the importable SDK and the openbkn CLI — both backed
by the same domain logic. A single unified CLI for the BKN platform, with the
operator surface nested under openbkn admin. Backend-only; no web UI.
Status: every command/subcommand is implemented and self-consistent, with a full-depth grouped
--helpfor every node. Reads + writes across all domains are validated against a live platform; a few paths are environment-gated on the test cluster (EACPchange-password/auditupstream, physical-catalogcreate-from-*, populated trace index) — seedocs/exec-plans/tech-debt-tracker.md.
npm install -g @openbkn/bkn-sdk # CLI: `openbkn`
# or as a library
npm install @openbkn/bkn-sdk
Requires Node ≥ 24.19.0.
# Log in — attach a token, or OAuth (headless password / browser PKCE)
openbkn auth login https://your-platform --token "$TOKEN"
openbkn auth login https://your-platform -u <user> -p <password> # headless OAuth
# Knowledge networks
openbkn bkn list
openbkn bkn get <kn-id> --stats
openbkn bkn search <kn-id> "customer churn"
openbkn bkn object-type list <kn-id>
# Data platform
openbkn resource list --type table
openbkn vega catalog list
openbkn model llm list
# Agents
openbkn agent list
openbkn agent sessions <agent-key>
# Operator (nested)
openbkn admin org list
openbkn admin role list
# Raw passthrough to any endpoint
openbkn call /api/ontology-manager/v1/knowledge-networks
# Global flags: --base-url, --token, --user, --json/--compact, -bd/--biz-domain, -k/--insecure,
# --conversation-id/--interaction-id (BKN Trace correlation; also BKN_CONVERSATION_ID/BKN_INTERACTION_ID)
# --new-conversation (ignore the remembered conversation for this command)
openbkn --help # grouped command map
On a managed-v2 deploy, commands continue the conversation the previous one
opened, so work spanning several commands lands in one thread. openbkn context conversation shows which
is in force and where it came from; --forget drops it. An explicit --token /
BKN_TOKEN opts out (identity there is the token, not the stored user) — use
BKN_CONVERSATION_ID to thread such a script's commands together.
Tokens are stored per platform/user under ~/.bkn/ (override: BKN_CONFIG_DIR).
import { createClient } from "@openbkn/bkn-sdk";
const bkn = createClient({ baseUrl: "https://your-platform", token: process.env.BKN_TOKEN });
const networks = await bkn.kn.list({ limit: 10 });
const task = await bkn.vega.build({ resource_id: "r-1", mode: "batch" }, { wait: true });
const raw = await bkn.call("/api/...", { method: "GET" });
Importing the package has no side effects; createClient resolves config explicitly.
Dynamic-data responses (including Vega and ontology queries) may contain native
bigint values for integers outside JavaScript's safe range. Serialize such a result with the exported
stringifyBigIntJSON() helper instead of native JSON.stringify().
npm install
npm run lint # biome + tsc --noEmit
npm test # vitest (unit)
npm run build # tsup → dist/ (library + `openbkn` bin)
Every command, subcommand, and sub-subcommand ships a grouped --help that
lists its flags and arguments, so the tree is discoverable end to end.
openbkn help all dumps the full per-action signature list.
skills/openbkn/ is an agent skill (for Claude Code / the skills.sh
ecosystem) that lets an AI drive the openbkn CLI from natural language. It
ships a SKILL.md (trigger intents, allowed-tools: Bash(openbkn *), a
command-group map, examples, and cautions) plus per-domain cheat sheets under
references/ (auth, bkn, agent, model, vega, resource, context,
skill, toolbox, trace, admin, call) and two how-tos (build-a-KN, troubleshooting).
A second skill, skills/create-bkn/, guides an AI through authoring a BKN
definition tree (network.bkn + typed object_types/ / relation_types/ /
action_types/ / concept_groups/ files, per the v2.0.1 spec) — with the
format spec, templates, and a worked example under references/. It pairs with
the openbkn skill, which then runs openbkn bkn validate / push on the
tree it produced.
Neither skill is part of the npm package — they're registered separately:
# Install a skill (globally), then ask in natural language:
npx skills add openbkn-ai/bkn-sdk@openbkn -g -y # operate the platform
npx skills add openbkn-ai/bkn-sdk@create-bkn -g -y # author .bkn files
# "列出所有知识网络" / "list all knowledge networks"
# "从 Vega catalog vcat-1 建一个名为 customers 的知识网络并构建索引"
# "帮我建一个描述订单域的 BKN 知识网络文件" / "author a BKN network for the orders domain"
The openbkn skill assumes the openbkn CLI is installed (npm i -g @openbkn/bkn-sdk) and you are logged in (openbkn auth login). It always defers
to live openbkn <group> <sub> --help for exact flags.
BKN SDK is part of the OpenBKN project and is licensed under the Apache License, Version 2.0. See LICENSE and NOTICE.
FAQs
Unified TypeScript SDK + CLI for the BKN (Business Knowledge Network) platform.
We found that @openbkn/bkn-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.