review-memory — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-memory (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run /review-memory when prompted by the memory review hook, or any time you want to audit what auto-memory has captured for this project. Use after completing a milestone, before starting new work, or when memory feels noisy.
Do NOT run this mid-task. Finish what you're working on first.
/review-memory --compact): Quick list of new memories with one-line summaries. Asks "promote, keep, or remove?" for each. No topic file reads. Use when context is low or time is short.Read MEMORY.md from the project's memory directory. The path follows this pattern: ~/.claude/projects/<project-path-encoded>/memory/MEMORY.md
Where <project-path-encoded> is the project root path with / replaced by -.
Also read any topic files referenced from MEMORY.md (e.g., feedback_testing.md, project_auth.md).
List what was found:
For each memory entry, evaluate all three categories in this order:
Every "Keep" must include a one-line justification for why it doesn't belong in CLAUDE.md, a rule, or a skill. If you can't articulate why, it's probably a Promote.
Present the categorisation as a table:
| # | Entry | File | Category | Reason |
|---|-------|------|----------|--------|
| 1 | Always use tabs | MEMORY.md | Remove | Already in rules/style.md |
| 2 | User is senior dev | user_role.md | Keep | User profile, not a project convention |
| 3 | API uses JWT auth | project_api.md | Promote | Add to project CLAUDE.md |Wait for the user to confirm or adjust the categories. Then:
For "Promote" entries:
For "Remove" entries:
For "Keep" entries:
After promoting any entries, check for contradictions:
Only flag clear contradictions. Near-duplicates where both phrasings add value are fine to keep.
Write the current unix timestamp to the review cache so the hook knows when the last review happened:
date +%s > ~/.claude/projects/<project-path-encoded>/memory/.last-reviewFor use when context is low or the hook suggests --compact.
Read MEMORY.md from the project's memory directory. Do NOT read topic files — use only the one-line descriptions from MEMORY.md.
Present each entry as a numbered list with the description from MEMORY.md:
1. [feedback] Stop taking shortcuts when debugging — Rewrote debugging.md
2. [feedback] Write complete code always — Restructured discipline.md
3. [project] Auth migration deadline March 15 — Legal compliance driverAsk: "Any to promote, remove, or update? Otherwise I'll mark as reviewed."
Same as full mode:
date +%s > ~/.claude/projects/<project-path-encoded>/memory/.last-review~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.