memory-import — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited memory-import (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Pull memories from another workspace into the current one. Useful when the user has built a previous app and wants its accumulated context — conventions, gotchas, references — to inform a new project.
<path>/.claude/memory/MEMORY.md exists. If not, tell the user the source workspace doesn't have a memory layer (it may not have been initialized with this toolkit).project/ and reference/ (with provenance tag) — they're the most likely to inform the new project.feedback/ — preferences from another project may not transfer ("no Tailwind in app A" doesn't mean "no Tailwind in app B"). Show the user the list and let them check/uncheck.user/ — usually applies (it's about the user, not the project), but the user should confirm.handoffs/ — those are session-specific to the source workspace.inherited/ — don't transitively chain inherits. If the user wants those too, they can re-import from the original source.inherited/<source>-<original-filename>.md.source-workspace: <path> added.> Imported from <source> on <date>. Treat as suggestive, not authoritative for the current project..claude/memory/MEMORY.md under "Inherited (from other workspaces)."If a target file already exists:
-2, -3, etc.<name>. The inherited one says <X>. Keep both, replace, or skip?"When an agent later relies on an inherited memory, it must:
Example:
app-foo project (inherited memory) used Postgres + Drizzle. Want me to set up the same here, or is this project different?"## Source: <path>
- Found memory layer: yes
- Memories available: 4 project, 2 user, 1 feedback, 3 reference, 6 handoffs
## Plan
- Auto-import (project + reference): 4 + 3 = 7 files
- Confirm-import (user + feedback): showing 3 to review
- Skipped: handoffs (6), inherited (0)
## Confirm imports
[ ] user/role.md — "senior eng, platform team"
[ ] user/preferences.md — "terse, no emojis, vitest"
[ ] feedback/no-mocks.md — "integration tests hit real DB"
(answer with the indices to import, or "all" / "none")After confirmation: write files, update index, print summary.
*_KEY, *_TOKEN, Bearer , sk_live_, etc.). Replace with [REDACTED — was a secret in source].~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.