session-memory-0b9737 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited session-memory-0b9737 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyze the current session for memorable decisions, outcomes, and patterns, then store confirmed items in Pensyve memory.
Note: As of the working-memory substrate update, most memorable items are already captured in-flight during the session by memory-woven skills (memory-informed-debug, memory-informed-design, memory-informed-longitudinal-work) and by the signal buffer's in-flight triggers. This skill handles residuals — items that weren't captured in-flight and still deserve to be saved. Before presenting candidates, call pensyve_inspect to see what's already been captured this session and skip duplicates.When this skill is invoked (typically at the end of a coding session), follow these steps:
Review the current session conversation for three categories of memorable content:
Decisions (confidence: 0.9):
Outcomes (confidence: 0.8):
Patterns (confidence: 0.7):
Skip routine, low-signal content that does not warrant long-term storage:
pensyve_recall with query: <candidate fact text>, entity: <candidate's entity>, limit: 3. If any returned memory has a score ≥0.85 against the candidate, skip it as a likely duplicate. Note: pensyve_inspect cannot filter by episode_id (its params are entity, memory_type?, limit? only), so this dedup check uses semantic similarity against the entity's full memory set rather than true session-scoped filtering. Consequence: very similar items captured in prior sessions will also trigger the skip — acceptable for avoiding genuine duplicates, but may miss newly-phrased variants of old memories.pensyve_recall with targeted queries)Present the candidate memories to the user in a structured format:
Session Memory Candidates
>
Decisions (confidence: 0.9):
>
1.auth-service: Chose RS256 over HS256 for JWT signing to support key rotation 2.api-design: POST endpoints return 201 with the created resource, not 200
>
Outcomes (confidence: 0.8): 3. database: Migration script fails silently when Python < 3.11 -- added version check>
Patterns (confidence: 0.7): 4. testing: Integration tests that touch the filesystem need tmpdir cleanup>
Which items should I store? (e.g., "all", "1,3", "none")
For each confirmed item, decide the storage type:
Episodic (observations) -- things that happened this session. Call pensyve_observe with:
episode_id: From the session state (set by SessionStart hook)content: The observation textsource_entity: "claude-code"about_entity: The inferred entity name (lowercase, hyphenated)content_type: "text" for decisions/patterns, "code" for code-related outcomesUse for: bug fixes, failed approaches, debugging outcomes, performance findings, session-specific events.
Semantic (durable facts) -- truths that persist beyond this session. Call pensyve_remember with:
entity: The inferred entity name (lowercase, hyphenated)fact: The memory textconfidence: 0.9 for decisions, 0.8 for outcomes, 0.7 for patternsUse for: architecture decisions, technology choices, user preferences, project conventions.
When in doubt, prefer pensyve_observe -- the consolidation engine promotes recurring patterns to semantic facts automatically.
Before storing, run pensyve_recall with a query matching the candidate fact to check for duplicates. If a highly similar memory already exists (score > 0.85), skip it and inform the user.
After storing, summarize what was saved:
Stored 3 memories:
>
-auth-service: Chose RS256 over HS256 for JWT signing (confidence: 0.9) -database: Migration script fails silently when Python < 3.11 (confidence: 0.8) -testing: Integration tests need tmpdir cleanup (confidence: 0.7)
pensyve_remember. This is a hard requirement.pensyve_remember fails, display the error and continue with remaining items.pensyve_recall (duplicate check) fails, proceed with storage but note that duplicate checking was skipped.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.