memex-retro — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited memex-retro (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You have access to a Zettelkasten memory system via the memex CLI. After completing this task, reflect on what you learned and save valuable insights.
Three equivalent interfaces — use whichever your environment supports:
| CLI (memex in PATH) | Plugin CLI fallback (Claude Code) | MCP tool (VSCode / Cursor) |
|---|---|---|
memex search <q> | node ~/.claude/plugins/cache/cc-plugins/memex/*/dist/cli.js search <q> | memex_search with query arg |
memex read <slug> | node ~/.claude/plugins/cache/cc-plugins/memex/*/dist/cli.js read <slug> | memex_read with slug arg |
memex write <slug> | node ~/.claude/plugins/cache/cc-plugins/memex/*/dist/cli.js write <slug> | memex_write with slug arg and body |
Resolution order: Try memex in PATH first. If not found, define a shell function and use it:
# Define once per session — DO NOT use variable assignment ($VAR won't expand correctly in zsh)
memex() { node $HOME/.claude/plugins/cache/cc-plugins/memex/*/dist/cli.js "$@"; }
# Then use normally
memex search "some query"
memex read some-slug
memex write some-slug << 'EOF'
card content here
EOFIf both CLI approaches fail, use MCP tools (memex_search, memex_read, memex_write).
The rest of this skill uses memex CLI syntax for brevity.
digraph retro {
"Task completed" -> "Distill: what insights came from this task?";
"Distill: what insights came from this task?" -> "Any insights worth keeping?" [shape=diamond];
"Any insights worth keeping?" -> "Done, no card written" [label="no"];
"Any insights worth keeping?" -> "For each insight: draft atomic card" [label="yes"];
"For each insight: draft atomic card" -> "Fact Hygiene Check (WHO/WHAT-WHEN/RELATIONSHIP)";
"Fact Hygiene Check (WHO/WHAT-WHEN/RELATIONSHIP)" -> "Ambiguity found?" [shape=diamond];
"Ambiguity found?" -> "Fix draft: make implicit context explicit" [label="yes"];
"Fix draft: make implicit context explicit" -> "Fact Hygiene Check (WHO/WHAT-WHEN/RELATIONSHIP)";
"Ambiguity found?" -> "memex search for related existing cards" [label="no"];
"memex search for related existing cards" -> "memex read candidates";
"memex read candidates" -> "Existing card covers same insight?" [shape=diamond];
"Existing card covers same insight?" -> "Update existing card (append new info)" [label="yes"];
"Existing card covers same insight?" -> "Write new card with [[links]]" [label="no"];
"Update existing card (append new info)" -> "memex write <existing-card>";
"Write new card with [[links]]" -> "memex write <new-card>";
"memex write <existing-card>" -> "More insights?" [shape=diamond];
"memex write <new-card>" -> "More insights?" [shape=diamond];
"More insights?" -> "For each insight: draft atomic card" [label="yes"];
"More insights?" -> "Done" [label="no"];
}memex search for related existing cardsmemex read it, then update it by appending new information (use memex write with the full updated content)[[links]] to related cards in the prose---
title: <descriptive title>
created: <today's date YYYY-MM-DD>
source: <auto-filled by client>
category: <optional category>
---
<One atomic insight, written in your own words.>
<Natural language sentences with [[links]] to related cards, explaining WHY they're related.>Note: You do NOT need to include modified — the CLI auto-sets it on write.
[[links]] must be embedded in sentences that explain the relationship.jwt-revocation-blacklist-patternsource is auto-managed by the MCP server.When curating cards from external sources like flomo:
source: flomo (not source: retro). This is critical for anti-loopback guards.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.