write-agent-memory-system-review — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited write-agent-memory-system-review (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this local skill to write or update type: kb/agent-memory-systems/types/agent-memory-system-review.md notes for external systems under kb/agent-memory-systems/reviews/.
This is a local commonplace-repo workflow, not a promoted cp-skill-* framework skill. The parent agent owns GitHub handling, local source directory setup, artifact lifecycle, QA, validation, indexes, and the final report. Delegate the code-grounded review drafting to a fresh worker context whenever the harness has a sub-agent mechanism.
Delegation means a harness-provided sub-agent/worker tool only. Never start a nested agent by running codex, codex exec, claude, or any other agent CLI from the shell. If the current agent cannot access the required harness sub-agent tool or an agent slot is unavailable, stop or wait and report the blocking condition; do not work around the limit with a command-line agent process.
owner/repo or https://github.com/owner/repo.related-systems/, outside kb/.If the system has no reachable source code, stop and write a lightweight note instead.
repo_url - canonical full GitHub repository URL for citations, https://github.com/{owner}/{repo} with no trailing slash or .gitowner - GitHub owner or organizationrepo_name - final path segmentrepo_slug - default review slug, usually repo_namecheckout_slug - owner-qualified checkout slug: {owner}--{repo_name}checkout_dir - related-systems/{checkout_slug}/source_dir - same path as checkout_dir; this is the directory passed to the review type contractnote_path - kb/agent-memory-systems/reviews/{repo_slug}.mdkb/agent-memory-systems/reviews/{repo_name}.md already exists for a different GitHub repository with the same final path segment, use kb/agent-memory-systems/reviews/{owner}--{repo_name}.md. Do not overwrite or update a same-name review unless its **Repository:** line or frontmatter resolves to the same owner/repo.related-systems/{repo_name}/; use a legacy checkout only when its origin remote resolves to the same GitHub owner/repo you are reviewing. If a legacy checkout points to a different owner with the same repository name, do not pull it, delete it, or repurpose it; clone the requested repo into the owner-qualified checkout_dir.git status --short in the main repo before cloning or writing so you know whether unrelated changes already exist.checkout_dir using the Bash working directory, a subshell, or cd first. Do not spell checkout-local commands as git -C "{checkout_dir}" ...; permission rules match command prefixes such as git fetch, and git -C ... fetch can unnecessarily trigger approval prompts. After checkout git operations, return to the Commonplace root before metadata capture, archive moves, index refresh, QA, or validation.If checkout_dir does not exist:
git clone "{repo_url}" "{checkout_dir}"If checkout_dir exists:
(
cd "{checkout_dir}"
git fetch --all --prune
git status --short
git merge --ff-only @{upstream}
)If using cd in the current shell instead of a subshell, save the Commonplace root first and cd back to it immediately after the checkout git commands.
Use git fetch rather than git pull so the refresh uses the agent-approved fetch permission path. If the merge cannot fast-forward because of local commits or conflicts, stop and report the state. Do not force, delete, or overwrite an existing checkout.
source_dir: checkout_dirsource_url: repo_urlreviewed_commit: output of git rev-parse HEAD run from checkout_dircommit_url: {repo_url}/commit/{reviewed_commit}{repo_url}/blob/{reviewed_commit}/{path}{repo_url}/tree/{reviewed_commit}/{path}Write the refresh marker immediately after a successful clone or fetch-and-fast-forward:
(
cd "{checkout_dir}"
git_dir="$(git rev-parse --absolute-git-dir)"
date -Iseconds > "$git_dir/commonplace-checkout-refreshed-at"
)If the marker is more than 1 hour old by the time drafting starts, carry a checkout freshness warning into the final report. If it is more than 24 hours old, refresh again before drafting.
note_path exists, archive it before drafting or delegating: git mv "{note_path}" "{note_path%.md}.replaced.{YYYY-MM-DD}.md"Then mark the archived file:
status: outdated in frontmatter.tags: [] (clearing any trace-derived tag).> Replaced {YYYY-MM-DD}. See [{name}](./{name}.md) for the current review.Do not read the archived .replaced.*.md file while writing the replacement.
kb/agent-memory-systems/types/agent-memory-system-review.md as the worker's artifact contract. Its embedded comparison lens is the review-time distillation of the memory-system design; do not ask the worker to load the full design note during ordinary review writing. The worker should follow the type contract's current retained-artifact vocabulary, including knowledge-artifact and system-definition-artifact use as behavioral-authority families.Launch one fresh sub-agent or worker with a minimal task-local context. Do not fork the parent's full context when the harness offers a clean-context option. Give the worker only the local skill handoff, the type contract path, the source directory, the target note path, and the source metadata listed below. Use only the harness sub-agent mechanism for this delegation; do not launch an agent CLI from Bash.
The worker has only this ownership:
kb/agent-memory-systems/COLLECTION.mdkb/agent-memory-systems/types/agent-memory-system-review.mdsource_dirnote_pathtrace-derived tag, or omit bothPass the worker the inputs defined in the type contract's ## Inputs section — the contract is authoritative; read the list from there (currently source_dir and note_path).
Also pass this parent-supplied source metadata for the review note:
source_urlreviewed_commitcommit_urlThe worker must not edit indexes, archived reviews, the trace-derived survey, checkout state, or unrelated files. The worker must not spawn further agents unless the harness exposes a proper sub-agent tool in that worker context; if it needs a nested worker and no slot/tool is available, it must pause and report the wait/blocker. It must never use codex, codex exec, claude, or similar shell commands as a substitute. The parent owns checkout, archive moves, curated index edits, taxonomy QA, semantic QA, validation, and final report.
If the harness cannot launch a sub-agent or worker, stop after setup and report that delegated drafting is unavailable. Do not draft locally unless the user explicitly authorizes a local fallback for this run. If the user authorizes that fallback, report drafting was local, not delegated as a workflow exception.
kb/agent-memory-systems/README.md when:## Coverage "Review backlog" callout — remove it there, or## Patterns Across Systems.Keep the edit minimal and specific.
kb/agent-memory-systems/trace-derived-learning-techniques-in-related-systems.md.If a field is absent because the reviewed system has no distinctive mechanism there, leave it absent. If the absence hides an important tradeoff, fix the review before semantic QA.
kb/instructions/run-review-batches-on-note.md on the new review note using the semantic bundle: create the runs and prompts with commonplace-create-review-runs, delegate each returned run to a sub-agent, then ingest each sentinel-bracketed output with commonplace-ingest-bundle-output. Treat it as a read-only QA loop: extract findings, fix clearly valid issues, and leave uncertain findings for the final report rather than forcing a rewrite.Do not use commonplace-run-review-bundles for this skill workflow unless the user explicitly authorizes subprocess runner execution, because that command invokes claude or codex exec internally. If semantic QA cannot be completed through the current harness, report it as a blocked QA step rather than substituting a shell-launched agent.
commonplace-validate "{note_path}"If validation reports structural or description-quality issues, fix them and validate once more.
Report:
trace-derived-learning-techniques-in-related-systems.md changedcommonplace-validate resultAlways:
related-systems/kb/agent-memory-systems/reviews/Never:
kb/codex, codex exec, claude, or another agent CLI from the shell to bypass delegation or worker limitscommonplace-run-review-bundles in this workflow without explicit authorization for its subprocess runner~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.