Is krimto-recall-team safe to install?

SaferSkills independently audited krimto-recall-team (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/krimto-recall-team/SKILL.md · 1 file

skills/krimto-recall-team/SKILL.md1.1 KB · Markdown

name: krimto-recall-team

description: Use when starting a task, joining a conversation about a project, or before answering a

question that needs team context. Triggers on "what do we know about X", "team's approach to Y", or

before any domain-specific work.

Recalling memory from Krimto

Before doing domain-specific work:

Call krimto_recall with a specific query:

query: the question or topic
scopes (optional): limit to specific scopes; omit to search everything you can read
limit (optional): defaults to 10

Results are hybrid-ranked (BM25 + vector) with hierarchical precedence: a user/ fact outranks a

team/ fact, which outranks an org/ fact, on the same topic.

Use krimto_read(id) to fetch full content if a snippet was truncated.

Return only directly relevant facts. Don't dump the full result set.

Common mistakes

Don't recall before every message — only when context is needed.
Don't recall with vague queries. Be specific.
Don't ignore precedence: if a user-scope fact contradicts a team-scope fact, the user-scope wins.

krimto-recall-team— agent skill

Is krimto-recall-team safe to install?

Recalling memory from Krimto

Common mistakes

Audit the pieces. Scan the whole. Decide.