Unverified50% confidenceFactExact time
Read-only Access returns an immutable copy via get_result(); other agents can only read and cannot modify it, and any improvement must be submitted as a new task, similar to the Git branch model.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
Unverifiedread_memory and append_memory are classified as PLANNING_TOOLS, so each call does not trigger a permission confirmation popup.66% similarUnverifiedThe control plane, as a GitHub App, has only two permissions, Metadata: read and Actions: read & write, and has no Contents permission, so it cannot clone repositories or read files.64% similarUnverified对象存储等密钥信息只在本地读取，不写死在代码里，也不提交到代码仓库。63% similarUnverifiedWhen running an Agent, a separate user, a separate directory, and zero credentials should be used, for example implemented through Docker parameters such as --user, --cap-drop ALL, and --read-only.62% similarUnverifiedSearch-type skills only return files that the current user has permission to access, and if a skill requires deleting content but the user lacks delete permissions, the skill will not take effect for that user.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1067065API
curl https://kongchang.com/api/v1/knowledge/claims/1067065MCP
get_claim(id=1067065)