RecommendSAFE
Claude Code plugin that generates individualized knowledge systems from conversation. You describe how you think and work, have a conversation and get a complete second brain as markdown files you own.
Overview
Claude Code plugin that generates individualized knowledge systems from conversation. You describe how you think and work, have a conversation and get a complete second brain as markdown files you own.
9eccf964e924OBSERVED · 2026-10-08Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: recommend
description: Get research-backed architecture advice for your knowledge system. Describe your use case, constraints, and goals — get specific recommendations grounded in TFT research with rationale for each decision. Triggers on "/recommend", "what would you recommend", "architecture advice", "knowledge system for".
version: "1.0"
generated_from: "arscontexta-v1.6"
user-invocable: true
context: fork
model: opus
allowed-tools: Read, Grep, Glob, mcp__qmd__search, mcp__qmd__vector_search, mcp__qmd__deep_search, mcp__qmd__get, mcp__qmd__multi_get
argument-hint: "[use case description and constraints] — describe what you want to build"
---
## Runtime Configuration (Step 0 — before any processing)
Read these files to configure recommendation behavior:
1. **`${CLAUDE_PLUGIN_ROOT}/reference/tradition-presets.md`** — tradition and use-case presets
- Pre-validated coherence points in the 8-dimension space
- Starting points for customization, not final answers
2. **`${CLAUDE_PLUGIN_ROOT}/reference/methodology.md`** — universal methodology principles
3. **`${CLAUDE_PLUGIN_ROOT}/reference/components.md`** — component blueprints (what can be toggled)
4. **`${CLAUDE_PLUGIN_ROOT}/reference/dimension-claim-map.md`** — maps each dimension position to supporting research claims
5. **`${CLAUDE_PLUGIN_ROOT}/reference/interaction-constraints.md`** — hard blocks, soft warns, cascade effects between dimensions
6. **`${CLAUDE_PLUGIN_ROOT}/reference/claim-map.md`** — topic navigation for the research graph
If any reference file is missing, note the gap but continue with available information. The recommendation degrades gracefully — fewer citations, same structure.
---
## EXECUTE NOW
**Target: $ARGUMENTS**
Parse immediately:
- If target is empty or a question: enter **conversational mode** — ask 1-2 clarifying questions, then recommend
- If target contains a use case description: proceed directly to **recommendation mode**
- If target contains `--compare [A] [B]`: enter **comparison mode** — compare two presets or configurations
**START NOW.** Reference below defines the workflow.
---
## Philosophy
**Advisory, not generative.**
/recommend exists for exploration. The user is considering a knowledge system — maybe they have a use case, maybe they're comparing approaches, maybe they're curious what the research says about a specific pattern. /recommend answers with specific, research-backed reasoning without creating any files.
This is the entry point before commitment. /setup generates a full system. /recommend sketches what that system would look like and WHY, so the user can decide whether to proceed. Every recommendation traces to specific research claims. "I recommend X" is never enough — "I recommend X because [[claim]]" is the minimum.
**The relationship to other skills:**
- **/recommend** → advisory sketch (no files)
- **/setup** → full system generation (creates everything)
- **/architect** → evolution advice for EXISTING systems (reads current state)
- **/refactor** → implements changes to EXISTING systems (modifies files)
/recommend is the only one that works without an existing system. It's pure reasoning from research.
---
## Phase 1: Understand the Constraints
### 1a. Parse User Input
Extract signals from the user's description. Every word is a signal:
| Signal Category | Examples | Maps To |
|-----------------|----------|---------|
| **Domain** | "therapy sessions", "research papers", "trading journal" | Closest preset, schema design |
| **Scale** | "just starting", "hundreds of notes", "massive corpus" | Granularity, navigation tiers |
| **Processing style** | "quick capture", "deep analysis", "both" | Processing depth, automation level |
| **Platform** | "Obsidian", "Claude Code", "plain files" | Platform capabilities, linking type |
| **Existing system** | "I use PARA", "I have a Zettelkasten", "starting fresh" | Tradition preset baseline |
| **Pain points** | "can't find anything", "too much ceremony", "notes go stale" | Dimension adjustments |
| **Goals** | "track claims", "build arguments", "personal reflection" | Note design, schema density |
| **Operator** | "I'll maintain it", "AI agent runs it", "both" | Automation, maintenance frequency |
### 1b. Conversational Mode (when input is sparse)
If the user's description lacks critical signals, ask **at most 2 clarifying questions**. Frame them as choices, not open-ended:
```
To recommend the right architecture, I need two things:
1. **What kind of knowledge?** (pick closest)
- Research/learning — tracking claims, building arguments
- Creative — drafts, revisions, inspiration
- Operational — tasks, decisions, processes
- Personal — reflections, goals, relationships
- Mixed — multiple of the above
2. **Who operates it?**
- Mostly you (human-maintained)
- Mostly an AI agent
- Both (shared operation)
```
Do NOT ask more than 2 questions. The recommendation can always be refined. Get enough to start, then recommend.
### 1c. Signal Insufficiency
If after parsing (and optional questions) you still lack critical information, make reasonable defaults and STATE them:
```
Assuming:
- Platform: Obsidian (most common for personal knowledge)
- Scale: moderate (50-200 notes in first year)
- Operator: human-primary with occasional AI assistance
These assumptions affect the recommendation. Correct any that don't match.
```
---
## Phase 2: Match to Preset
### 2a. Read Presets
Read `${CLAUDE_PLUGIN_ROOT}/reference/tradition-presets.md`. This file contains:
- **Tradition presets** — Zettelkasten, PARA, Evergreen, Cornell, etc.
- **Use-case presets** — research, creative writing, engineering, therapy, etc.
### 2b. Find Closest Match
Score each preset against the user's signals:
| Criterion | Weight | How to Score |
|-----------|--------|-------------|
| Domain match | High | Does the preset's intended domain match? |
| Processing style match | High | Does the preset's processTrust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
9eccf964e924full audit observations/trust-audit/skill/agenticnotetaking__recommend.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 9eccf964e924 | SAFE | B | 89 | first audit |
Questions
What does the Recommend skill do?
Claude Code plugin that generates individualized knowledge systems from conversation. You describe how you think and work, have a conversation and get a complete second brain as markdown files you own.
Is Recommend safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Recommend access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Recommend work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (9eccf964e924), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.