agent-memory — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-memory (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Context is what an agent holds now; memory is what it carries across sessions. The two fail in opposite directions: too little durable memory and the agent re-learns the same facts every run; too much, or ungoverned, and it confidently applies a shortcut learned from one odd interaction to everything (memory drift), or re-introduces a bug it "remembers" was fine. This skill is the discipline for memory that helps instead of rots: persist the few things worth remembering, scope and retrieve them deliberately, and govern what gets written so the store stays trustworthy.
Memory is distinct from the three things it's often confused with: [[context-curation]] decides what's loaded into a single session; [[long-running-agents]] keeps one run's state (plan/progress/handoff) durable and resumable; [[skill-harvest]] promotes a reusable lesson into the skill library. This skill governs the agent's cross-session, per-context memory store — and links to all three.
([[long-running-agents]], [[autonomous-loops]])
Skip when:
Not a substitute for [[context-curation]] (in-session load) or [[long-running-agents]] (single-run state) — memory is the layer that persists between them.
Persist only durable, reusable facts: stable user preferences, settled decisions and their reasons, hard-won project constraints. Do not persist transient run state, anything secret, or one-off facts. A small, high-signal store beats a large one the agent can't trust. When unsure, don't write it.
Keep the durable memory store distinct from the current run's working state ([[long-running-agents]] owns the latter). Session state is disposable per run; memory outlives runs. Conflating them is how run-specific noise leaks into long-term memory and drifts behavior.
Bind each memory to whose and which context it applies to (user, project, repo), and govern which agents may read or write it. Unscoped global memory is how a fact true in one project silently corrupts another. Least-privilege on writes especially.
Pull memory by relevance to the task, not by dumping the whole store into context every turn (that's [[context-curation]]'s budget you'd blow). Prefer a searchable store with relevance lookup; load the few memories that match, link related ones, and leave the rest at rest.
Each memory: a short fact, why it's true, and when/where it was learned. Attribution lets a later run judge whether it still holds. An unattributed "always do X" is exactly what becomes a drifted shortcut.
or API, confirm it still exists ([[source-first]]); memory reflects what was true when written.
poison itself; gate or review writes the way [[autonomous-loops]] gates risky actions.
Memory is a garden, not a log. When a fact changes, update it; when two overlap, merge; when one is proven wrong or obsolete, delete it. Keep an index so the store stays discoverable. A store that only grows becomes one the agent stops trusting.
Route each durable thing to where it belongs: a reusable process → [[skill-harvest]]; a human-owned decision → [[decision-docs]] (and optionally a memory pointing at it); a per-user/project fact → the memory store here. Don't let everything pile into one bucket.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.