SaferSkills independently audited rlm-mem (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run and maintain RLM-MEM as a self-contained memory runtime under RLM-MEM/. This manual is for execution, not theory: follow it when setting up, extending, or troubleshooting the package.
RLM-MEM/RLM-MEM/brain/scripts/RLM-MEM/README.md, RLM-MEM/SKILL.md, RLM-MEM/FRESH_AGENT_CHECKLIST.mdRLM-MEM/**RLM-MEM/**RLM-MEM/brain/scripts/*.pyRLM-MEM/README.md and/or RLM-MEM/SKILL.mdRLM-MEM/FRESH_AGENT_CHECKLIST.mdRLM-MEM/scripts/*.pyRLM-MEM/brain/scripts/memory_policy.py, memory_layers.pylayered_memory_store.py, layered_adapter.py, memory_store.pyremember_operation.py, recall_operation.py, reason_operation.pymemory_safety.py, memory_schema.pymemory_cli.py, chunking_engine.py, auto_linker.py, cache_system.py, migration_tool.pyoriginal_rlm_mem.py, repl_environment.py, repl_functions.pytest_*.py files for unit, integration, and final matrixRLM-MEM/scripts/check_no_runtime_duplicates.py -> blocks duplicate runtime driftcheck_skill_only_integrity.py -> blocks old/legacy authoritative path regressionssetup_rlm_mem.py, manage_soul.py, manage_user.py)RLM-MEM/brain/ compatibility assetssliders/, personalities/, gauges/ remain available for hosts that support themRLM-MEM/souls/, RLM-MEM/USER.md, RLM-MEM/ACTIVE_SOUL.mdRLM-MEM/README.md and this file.PYTHONPATH to RLM-MEM.RLM-MEM/**.From repo root:
$env:PYTHONPATH=(Resolve-Path RLM-MEM).Path
python -c "from brain.scripts import LayeredMemoryStore, LayeredChunkStoreAdapter, MemoryPolicy; print('OK')"
python RLM-MEM/scripts/check_no_runtime_duplicates.py
python RLM-MEM/scripts/check_skill_only_integrity.pyRun these only when behavior is broken, migrating internals, or cutting a release PR.
$env:PYTHONPATH=(Resolve-Path RLM-MEM).Path
python -m unittest brain.scripts.test_memory_schema brain.scripts.test_memory_policy brain.scripts.test_memory_layers brain.scripts.test_memory_safety brain.scripts.test_layered_writer -v
python -m unittest brain.scripts.test_remember_layered_integration brain.scripts.test_recall_layered_integration brain.scripts.test_reason_layered_integration brain.scripts.test_multi_agent_isolation -v
python -m unittest brain.scripts.test_final_integration -vWhen onboarding a new agent, require this handoff text:
Treat only `RLM-MEM/` as source of truth. Read `RLM-MEM/SKILL.md`, run import + guard checks first, edit only `RLM-MEM/**`, and only run the test matrix if behavior fails or release verification is requested.MemoryPolicy -> LayeredMemoryStore -> LayeredChunkStoreAdapter -> RememberOperationRecallOperation with policy-scoped retrievalReasonOperation for synthesis/comparison/contradiction analysisbrain/scripts/migration_tool.py with dry-run firstPYTHONPATH first.RLM-MEM/**.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.