remember — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited remember (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
remember drives `eidetic remember`, the write half of the memory surface (the read half is the sibling /recall skill). Records you store here are recallable later by any agent on this machine — Claude or the colleague backend — because the default store is one shared ~/.eidetic/memory path.
# One record (JSON object as the argument):
bash .claude/skills/remember/scripts/remember.sh \
'{"id":"d1","text":"Orin Nano draws 7-15W","type":"docs","metadata":{"source":"docs","permalink":"https://..."}}' --json
# Batch (NDJSON on stdin, one record per line) — for bulk re-index:
cat records.ndjson | bash .claude/skills/remember/scripts/remember.sh --json
# Record that supersedes an older one (same scope required for sweep to shadow):
bash .claude/skills/remember/scripts/remember.sh \
'{"id":"r2","text":"Updated Orin Nano draw: 10-20W","type":"note","supersedes":"r1","links":["r3"]}' --jsonThe wrapper resolves the CLI portably (installed eidetic on PATH, else uv run eidetic from the checkout) and forwards every flag verbatim.
| Field | Required? | Notes |
|---|---|---|
id | yes | stable identity; the upsert key |
text | yes | the chunk being remembered |
type | yes | e.g. note, docs, discord, a research object type |
hash | optional | content hash for dedup; derived from text when omitted |
metadata | recommended | provenance + facets; round-trips verbatim on recall |
created | auto-stamped | ISO-8601 UTC date; stamped at ingest if absent; drives freshness signal age-decay |
supersedes | optional | id of an earlier same-scope record this one replaces; sweep auto-shadows the target |
links | optional | list of related-memory ids; persisted for future corroboration scoring |
score and signal are recall-only and are ignored on ingest. Mind the scope: the default personal scope is private (--scope reachy-mini-mcp --visibility private), so personal/role-gated notes stay isolated to this agent's recall and are safe to store. Only when you deliberately write to a public scope (--visibility public) does the record enter the shared pool visible to every scope — keep public-scope records to public data only.
Re-submitting a record with the same id overwrites the previous value; a record with a matching content hash is de-duplicated. So re-running an ingest (e.g. a periodic re-scan) is safe and will not create duplicates.
Setting supersedes on a record declares that this record replaces an earlier one within the same scope. The actual lifecycle transition (marking the older record as shadowed) is applied by eidetic sweep, not by remember itself. Cross-scope supersedes links are recorded but never auto-shadow (preserving the public/private no-leak invariant).
To apply pending transitions after ingesting superseding records:
eidetic sweep --dry-run # preview what would change
eidetic sweep # apply transitionseidetic remember)--json — structured result ({"upserted": N, "ids": [...]}) to stdout.--scope NAME / --visibility public|private — record scope. **The wrapperdefaults this to the agent's PERSONAL, PRIVATE scope** — --scope <suffix> --visibility private, where <suffix> is read from the nearest culture.yaml (here, reachy-mini-mcp). Private records are served only to a recall in the same scope, so they don't leak to a default/other-scope query. Pass --scope to steer to a different scope (which then uses the plain CLI default visibility), or --visibility public to keep the personal scope but make it shared. A wheel install with no culture.yaml falls back to the CLI default default/public.
--backend files|mongo|neo4j — default files (the shared home-dir store);use mongo/neo4j (with EIDETIC_MONGO_URI / NEO4J_URI) for a server store.
(http://localhost:8002/v1); override with EIDETIC_EMBED_URL / EIDETIC_EMBED_MODEL. Ingest still works offline (embeddings are recomputed at recall time).
PATH (in a dev checkout it isn't); the wrapper resolves it (PATH first, else uv run eidetic). For the docs, run eidetic explain remember if installed, otherwise uv run --project <eidetic-cli checkout> eidetic explain remember.
First-party to eidetic-cli — eidetic owns its memory surface. Cite, don't import: downstream repos copy this skill, they don't symlink it. See docs/skill-sources.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.