auto-dream — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited auto-dream (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Background memory consolidation cycle. Scans memory files, finds stale, duplicate, and conflicting entries, consolidates them, synthesizes cross-session insights, builds an injection-ready payload for the next session start, and writes a dated dream report.
scripts/auto-dream-cron.sh --execute./scripts/auto-dream-cron.sh (dry-run by default)When invoked interactively (not via cron), read skills/meta/auto-dream/dream-prompt.md and execute its phases directly. The prompt is self-contained -- it describes the full cycle including safety constraints, file paths, and output formats.
For cron invocation: the dream prompt is passed directly to claude -p and runs as a standalone headless session with no CLAUDE.md, no hooks, no project context. All instructions are embedded in the prompt.
~/.claude/state/dream-scan-{date}.md.~/.claude/state/dream-analysis-{date}.md.~/.claude/state/dream-injection-{project-hash}.md.~/.claude/state/last-dream.md.memory/archive/, never rmmerged_from field for provenanceDREAM_DRY_RUN_MODE=yes, substituted into the prompt at runtime.# Dry run (read-only, no filesystem changes — dry-run is the default)
./scripts/auto-dream-cron.sh
# Full run (execute consolidation)
./scripts/auto-dream-cron.sh --execute
# Check output
cat ~/.claude/state/last-dream.md
# Verify cron registration
python3 ~/.claude/scripts/crontab-manager.py list~0.09 USD per nightly run with 50 memory files (~20-30K input tokens at Sonnet pricing). ~33 USD/year for automated overnight operation. Budget capped at 3.00 USD/run via wrapper script.
Use crontab-manager.py (not raw crontab -e) to install. The wrapper script handles PATH, lockfile, logging, budget cap, and dry-run/execute toggle.
# Preview the cron entry
python3 ~/.claude/scripts/crontab-manager.py add \
--tag "auto-dream" \
--schedule "7 2 * * *" \
--command "/home/feedgen/vexjoy-agent/scripts/auto-dream-cron.sh --execute >> /home/feedgen/vexjoy-agent/cron-logs/auto-dream/cron.log 2>&1" \
--dry-run
# Install (after dry-run testing passes)
python3 ~/.claude/scripts/crontab-manager.py add \
--tag "auto-dream" \
--schedule "7 2 * * *" \
--command "/home/feedgen/vexjoy-agent/scripts/auto-dream-cron.sh --execute >> /home/feedgen/vexjoy-agent/cron-logs/auto-dream/cron.log 2>&1"
# Verify
python3 ~/.claude/scripts/crontab-manager.py verify --tag auto-dreamNote: schedule uses 2:07 AM (off-minute) per cron best practice — avoids load spikes from jobs firing at :00.
scripts/auto-dream-cron.sh follows the established headless cron pattern (see skills/content/reddit-moderate/scripts/reddit-automod-cron.sh):
flock lockfile prevents concurrent runs--permission-mode auto (never --dangerously-skip-permissions)--max-budget-usd 3.00 caps spend per run--no-session-persistence for clean headless operationenvsubst templates dream-prompt.md with project-specific paths at runtimetee to timestamped per-run log file--execute for live runsPIPESTATUS[0]Load when the task requires detailed guidance beyond the phases above.
| Signal | Reference |
|---|---|
| Failed cron run, wrapper script setup, budget cap | references/headless-cron-patterns.md |
| Memory file writes, YAML frontmatter, staleness, merging | references/memory-file-operations.md |
| Dry-run validation, output file verification | references/dream-cycle-testing.md |
| Cron log interpretation, rotation, phase markers | references/logging-patterns.md |
| Concurrent runs, lockfile, partial write recovery | references/concurrency.md |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.