memory-system — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited memory-system (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Without memory, every session starts from zero — preferences re-explained, conventions re-discovered, decisions re-litigated. This skill fixes that by keeping a small, searchable record on disk. A short index points to detailed topic files, so the agent can pull back exactly what it needs.
The trade is favorable: loading the index costs roughly a thousand tokens, while skipping the re-discovery it replaces saves several thousand.
.aim-agents/memory/
├── MEMORY.md ← the index — a thin set of pointers, ≤200 lines
├── user-preferences.md ← who the user is: role, style, tooling
├── project-conventions.md ← how this project does things
├── tech-decisions.md ← architectural calls already made
├── feedback-history.md ← what landed well or badly
└── <topic>.md ← more topic files as the need arisesMEMORY.md is a directory, not a database. Each line is a one-glance summary that names the topic file holding the full story.
Keep it disciplined:
- [type] summary → topic-file.md.[user], [feedback], [project], [reference].A worked example:
# Memory Index
## User
- [user] Works on macOS, lives in the terminal, prefers fish → user-preferences.md
- [user] Staff backend engineer, ~10 yrs in distributed systems → user-preferences.md
- [user] Writes in English; occasional German → user-preferences.md
## Project
- [project] pnpm only — never npm or yarn → project-conventions.md
- [project] React 19 with the compiler on → tech-decisions.md
- [project] Trunk-based; short-lived branches off main → project-conventions.md
## Feedback
- [feedback] Wants answers tight, no preamble → feedback-history.md
- [feedback] Finds long walkthroughs tedious → feedback-history.md
- [feedback] Reaches for tables over bullet lists → feedback-history.md
## Reference
- [reference] Staging gateway listens on 8443 → infrastructure-notes.md
- [reference] Release flow: tag, then CI promotes → project-conventions.mdEvery topic file opens with frontmatter and then holds organized prose:
---
type: user | feedback | project | reference
created: 2026-05-02
updated: 2026-05-02
---
# User Preferences
## Environment
- OS: macOS
- Shell: fish
- Editor: Neovim
- Package manager: pnpm (never npm)
## Style
- Wants concise answers
- Prefers tables for comparisons
- Avoids long-winded explanations| Tag | Holds | For instance |
|---|---|---|
| user | Role, preferences, tools, how they like to communicate | "Staff engineer, terminal-first" |
| feedback | Reactions to the agent's output | "Called a reply 'too long', wanted a table" |
| project | Standards, stack choices, conventions | "pnpm only, React 19" |
| reference | Non-secret infra notes, public URLs, config facts | "Staging gateway port" |
| Keep out | Because |
|---|---|
| Secrets — keys, tokens, passwords, private keys | The store persists and may travel between sessions |
| Anything the code already states | Read package.json; don't memorize the dep list |
| Throwaway debug context | It clutters the store and ages out fast |
| Literal code snippets | Code drifts; the note goes stale |
| Paths that might move | Prefer a glob or a description |
| Whole transcripts | Memory holds distilled insight, not logs |
.aim-agents/memory/MEMORY.md..aim-agents/memory/*.md for the term.memory/archive/.Every session begins the same way:
Is there a .aim-agents/memory/MEMORY.md?
yes → read it, apply what's relevant, silently
no → carry on; create one the first time "remember" comes up
Apply memory without reading it aloud.
Avoid: "I recall you use pnpm and prefer terse replies..."
Prefer: (just use pnpm in commands, keep replies terse)
The exception: if asked "what do you remember?", recite the relevant bits.| Artifact | Holds | Lives | Lives in |
|---|---|---|---|
| Memory | Knowledge across sessions | Until pruned | .aim-agents/memory/ |
| Plan | The breakdown of a project | Until the project ships | Project root |
| Task | Progress within a session | Until the session ends | Artifact directory |
Memory is what you know. A plan is what you intend to do. A task is what you're doing right now.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.