session-memory-e52770 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited session-memory-e52770 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyze the current session using the tiered capture taxonomy, then store confirmed items in Pensyve memory.
When this skill is invoked (typically at the end of a coding session), follow these steps:
Review the current session conversation and classify memorable content into two tiers:
Tier 1 -- Auto-store candidates (confidence >= 0.9):
These are high-signal items that should almost always be stored:
Tier 2 -- Review candidates (confidence 0.7-0.89):
These are medium-signal items that benefit from user confirmation:
Discard -- Never store:
pensyve_recall with targeted queries)Present the candidate memories to the user in a structured format, grouped by tier:
Session Memory Candidates
>
Tier 1 -- High confidence (auto-store recommended):
>
1.auth-service: Chose RS256 over HS256 for JWT signing to support key rotation (0.95) 2.api-design: POST endpoints return 201 with the created resource, not 200 (0.9)
>
Tier 2 -- For review:
>
3.database: Migration script fails silently when Python < 3.11 -- added version check (0.8) 4.testing: Integration tests that touch the filesystem need tmpdir cleanup (0.7)
>
Which items should I store? (e.g., "all", "1,3", "none")
For each confirmed item, decide the storage type based on its tier:
Tier 1 items -> Semantic (durable facts). Call pensyve_remember with:
entity: The inferred entity name (lowercase, hyphenated)fact: "[capture/session-memory/tier-1] <fact text>"confidence: 0.9-0.95 (based on classification)Use for: architecture decisions, technology choices, user preferences, project constraints.
Tier 2 items -> Episodic (observations). Call pensyve_observe with:
episode_id: From the session state (if episode tracking is active)content: "[capture/session-memory/tier-2] <observation text>"source_entity: "gemini-cli"about_entity: The inferred entity name (lowercase, hyphenated)content_type: "text" for decisions/patterns, "code" for code-related outcomesUse for: root causes, failed approaches, performance findings, dependency discoveries.
If no episode is active, fall back to pensyve_remember with confidence 0.7-0.8.
When in doubt, prefer pensyve_observe -- the consolidation engine promotes recurring patterns to semantic facts automatically.
Before storing, run pensyve_recall with a query matching the candidate fact to check for duplicates. If a highly similar memory already exists (score > 0.85), skip it and inform the user.
Content sanitization: Before storing any candidate:
After storing, summarize what was saved:
Stored 3 memories:
>
-auth-service: Chose RS256 over HS256 for JWT signing (confidence: 0.9) -database: Migration script fails silently when Python < 3.11 (confidence: 0.8) -testing: Integration tests need tmpdir cleanup (confidence: 0.7)
pensyve_remember. This is a hard requirement.pensyve_remember fails, display the error and continue with remaining items.pensyve_recall (duplicate check) fails, proceed with storage but note that duplicate checking was skipped.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.