Skip to main content

Knowledge Base Implementation

Creates self-service support systems with organized articles and FAQs, enhancing user experience and reducing support tickets.

Install this skill

or
30/100

Security score

The Knowledge Base Implementation skill was audited on Feb 12, 2026 and we found 22 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 518

Template literal with variable interpolation in command context

SourceSKILL.md
518uniqueSlug = `${slug}-${counter}`;
medium line 542

Template literal with variable interpolation in command context

SourceSKILL.md
542changeLog: `Version ${currentVersion}`,
medium line 945

Template literal with variable interpolation in command context

SourceSKILL.md
945`${article.title} ${article.excerpt || ''}`
medium line 1081

Template literal with variable interpolation in command context

SourceSKILL.md
1081content = content.replace(new RegExp(`{{${variable.name}}}`, 'g'), String(value));
medium line 1253

Template literal with variable interpolation in command context

SourceSKILL.md
1253fileUrl: `/uploads/kb/${req.file.filename}`,
medium line 1590

Template literal with variable interpolation in command context

SourceSKILL.md
1590const text = `${title} ${content}`.toLowerCase();
medium line 1612

Template literal with variable interpolation in command context

SourceSKILL.md
1612const ogImage = article.seo?.ogImage || `${baseUrl}/default-og-image.jpg`;
medium line 1616

Template literal with variable interpolation in command context

SourceSKILL.md
1616return `
medium line 1630

Template literal with variable interpolation in command context

SourceSKILL.md
1630return `
medium line 1656

Template literal with variable interpolation in command context

SourceSKILL.md
1656return `${baseUrl}/kb/${article.slug}`;
medium line 1715

Template literal with variable interpolation in command context

SourceSKILL.md
1715const slug = `${originalArticle.slug}-${params.language}`;
medium line 1959

Template literal with variable interpolation in command context

SourceSKILL.md
1959const articles = await db.$queryRaw`
low line 935

Access to .env file

SourceSKILL.md
935this.pinecone = new Pinecone({ apiKey: process.env.PINECONE_API_KEY! });
low line 936

Access to .env file

SourceSKILL.md
936this.openai = new OpenAI({ apiKey: process.env.OPENAI_API_KEY! });
low line 949

Access to .env file

SourceSKILL.md
949const index = this.pinecone.index(process.env.PINECONE_INDEX!);
low line 983

Access to .env file

SourceSKILL.md
983const index = this.pinecone.index(process.env.PINECONE_INDEX!);
low line 1633

External URL reference

SourceSKILL.md
1633"@context": "https://schema.org",
low line 1999

External URL reference

SourceSKILL.md
1999- [Tiptap Editor](https://tiptap.dev/)
low line 2000

External URL reference

SourceSKILL.md
2000- [Pinecone Vector Database](https://www.pinecone.io/)
low line 2001

External URL reference

SourceSKILL.md
2001- [Knowledge Base Best Practices](https://www.zendesk.com/blog/knowledge-base-best-practices/)
low line 2002

External URL reference

SourceSKILL.md
2002- [OpenAI API](https://platform.openai.com/docs/)
low line 2003

External URL reference

SourceSKILL.md
2003- [Prisma Documentation](https://www.prisma.io/docs/)
Scanned on Feb 12, 2026
View Security Dashboard