memory-ci-capture — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited memory-ci-capture (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Turn a meaningful GitHub delivery moment into project memory. GitHub records the mechanics. Basic Memory remembers what changed and why.
Read the ProjectUpdateContext JSON produced by bm ci collect at .github/basic-memory/project-update-context.json. Treat it as the immutable source of truth for repository, event type, PR number, workflow run, SHA, source URL, timestamps, and deployment environment.
Do not invent tests, deploy checks, linked issues, product impact, or decisions. If evidence is absent, say so briefly in verification or leave the field empty.
Return only JSON matching the AgentSynthesis shape:
{
"summary": "What changed.",
"why_it_matters": "Why this update matters for future humans and agents.",
"user_facing_changes": [],
"internal_changes": [],
"verification": [],
"follow_ups": [],
"decision_candidates": [],
"task_candidates": []
}in the context, and concrete follow-ups.
decision_candidates onlywhen the source context clearly contains them.
task_candidates only when it is concrete enough to act on.For merged pull requests, focus on why the PR existed, what area changed, what issues it advanced or closed, and what verification evidence appears in the context.
For production deploys, focus on what reached production, the deployed SHA, environment, workflow run, and verification evidence. Do not overclaim success beyond the workflow and source facts.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.