
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Platform-agnostic AI development methodology with TDD, quality gates, and structured workflows
AI coding assistants lack structure. Without it, they forget context between sessions, skip tests, make changes without considering impact, and declare "done" without verifying anything works.
KnowzCode brings discipline to AI-assisted development — quality gates, test-driven workflows, and session continuity that keeps complex projects on track.
KnowzCode adds overhead. Here's when it's worth it:
Your agent's native mode is fine for: single-file changes, small refactors, anything you can verify at a glance.
Reach for KnowzCode when:
The overhead pays for itself when the cost of getting it wrong exceeds the cost of being thorough.
Goal → Analyze → ✓ → Design → ✓ → Build & Test → Audit → ✓ → Ship
✓ = approval gate (you decide whether to proceed)
| Step | What Happens |
|---|---|
| Analyze | Scans your codebase for impact — what files change, what could break, what patterns to follow |
| Design | Drafts specifications with requirements and test criteria. You review before any code is written |
| Build & Test | Tests first, then code. Verification loops catch regressions |
| Audit | Quality review covering code quality, security, test coverage, and adherence to your standards |
| Ship | Commits, updates documentation, and captures learnings |
KnowzCode automatically classifies tasks by complexity:
| Tier | When | What Happens |
|---|---|---|
| Quick Fix | Single file, small bug | Skips the loop. Fix, verify, done |
| Light | 3 files or fewer | Streamlined two-step path |
| Full | Complex features | Complete loop with all gates |
# Claude Code (recommended)
/plugin marketplace add knowz-io/knowz-skills
/plugin install knowzcode@knowz-skills
cd your-project/
/knowzcode:init
# All platforms
npx knowzcode # Interactive setup
npx knowzcode install --platforms claude,gemini # Specific platforms
npx knowzcode install --platforms all # All 6 platforms
# Build a feature (full loop)
/knowzcode:work "Build user authentication with email and password"
# Research first, build later
/knowzcode:explore "how is authentication implemented?"
# Quick fix (skips the loop)
/knowzcode:fix "Fix typo in login button text"
# Resume where you left off
/knowzcode:continue
| Command | Description |
|---|---|
/knowzcode:work <goal> | Start a feature workflow |
/knowzcode:explore <topic> | Research before implementing |
/knowzcode:fix <target> | Quick targeted fix |
/knowzcode:audit [type] | Run quality audits |
/knowzcode:init | Initialize in your project |
/knowzcode:status | Check project status |
/knowzcode:continue | Resume active work |
/knowzcode:telemetry | Investigate production errors |
Full support:
| Platform | Install |
|---|---|
| Claude Code | /plugin install knowzcode@knowz-skills |
| OpenAI Codex | npx knowzcode install --platforms codex |
| Gemini CLI | npx knowzcode install --platforms gemini |
Experimental:
| Platform | Install |
|---|---|
| GitHub Copilot | npx knowzcode install --platforms copilot |
| Cursor | npx knowzcode install --platforms cursor |
| Windsurf | npx knowzcode install --platforms windsurf |
KnowzCode optionally connects to Knowz for persistent knowledge across projects:
Works fully without Knowz. The connection adds memory, not dependency.
KnowzCode builds upon the Noderr project by @kaithoughtarchitect.
MIT License with Commons Clause — See LICENSE for details.
FAQs
Platform-agnostic AI development methodology with TDD, quality gates, and structured workflows
We found that knowzcode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.