Moradin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Moradin (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
A workshop for accumulating build-taste across projects. Cross-tool dev brain.
Moradin is a directory on your machine — a workshop. You open Claude Code (or Cursor, Codex, Gemini) in it. That session inherits your principles, patterns, references, lessons, and per-project state. You then use that session to build other projects. Moradin itself just accumulates knowledge.
It is not a running agent. No port, no scheduler, no daemon. Just markdown files + Python scripts. Dormant when you're not using it. Comes alive when an agent opens the directory.
# Use the GitHub template button to create your private instance, then:
git clone https://github.com/<your-username>/<your-moradin-fork>.git ~/Documents/moradin
cd ~/Documents/moradin
claude # or `cursor .` or whichever agent you useIn your first session:
/moradin:init # set up workshop, optionally create first project slot
/moradin:capture <url> # capture an external source
/moradin:recall "what do I know about X?" # search memory
/moradin:build <project> <task> # structured build session
/moradin:ship # end-of-session, save lessonsmoradin/
AGENTS.md / CLAUDE.md ← workshop brain (loaded every session)
.claude-plugin/ ← Claude Code plugin manifest
skills/ ← 8 SKILL.md-compliant verbs
scripts/ ← stdlib-only Python utilities
memory/ ← THE memory layer (5 content types)
principles/ ← universal rules
patterns/ ← reusable designs
references/ ← captured external sources (full inventory)
lessons/ ← incident-derived rules
preferences/ ← personal taste — how you like to work
projects/ ← per-project state, plans, sessions, design docs
templates/ ← scaffolds for new files
examples/ ← demo content (committed)
plugins.md ← recommended companion plugins
docs/ ← QUICKSTART, CONCEPTS, CONTRIBUTING, FAQ| Verb | What it does |
|---|---|
init | Initialize a fresh workshop |
capture | Capture an external source as a reference (full unfiltered concept inventory) |
recall | Search memory + synthesize an answer with citations |
audit | Lint memory: stale, missing fields, bad tags, orphans |
stats | Counts + coverage report |
build | Structured build session against a target project |
ship | End-of-session: save lessons, update state |
retrospect | Review past sessions, propose promotions to patterns/principles |
learn-from-sessions | Mine accumulated Claude Code session history for implicit preferences — one-time bootstrap or periodic refresh (see docs) |
memory/ is gitignored from the framework remote.AGENTS.md (Linux Foundation standard) as source of truth, with CLAUDE.md as a copy/symlink. Works in Claude Code, Cursor, Codex, Gemini.SKILL.md format. Plugin manifest follows Anthropic's spec.When the Moradin framework updates, pull changes without losing your personal content:
./scripts/update.shThis merges upstream framework changes via -X ours so your memory/ and projects/ stay intact.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.