MemorySAFE
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Overview
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
bbcc1b9f30e4OBSERVED · 2026-10-12Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: memory description: 'Execute extract and use project memories from previous sessions for context-aware assistance. Use when recalling past decisions, checking project conventions, or understanding user preferences. Trigger with phrases like "remember when", "like before", or "what was our decision about". ' allowed-tools: Read, Write version: 1.21.0 author: Jeremy Longshore <[email protected]> license: MIT tags: - community - memory compatibility: Designed for Claude Code --- # Memory ## Overview Memory provides persistent context across Claude Code sessions by storing and retrieving project decisions, user preferences, and coding conventions from a local JSON file. When a new session starts, stored memories load automatically so previously established patterns carry forward without re-explanation. ## Prerequisites - Project memory file at `.claude/memories/project_memory.json` (created automatically on first memory save) - Read and Write permissions for the `.claude/memories/` directory - Claude Never Forgets plugin installed (`/plugin install yldrmahmet/claude-never-forgets`) ## Instructions 1. **Access stored memories.** On session start, locate and read the memory file at `.claude/memories/project_memory.json` using the Read tool. Parse the JSON structure containing timestamped memory entries. See `${CLAUDE_SKILL_DIR}/references/implementation.md` for the full retrieval workflow. 2. **Match memories to current context.** Scan memory entries for keywords and topics relevant to the current task. Extract applicable decisions (e.g., "use pnpm instead of npm"), architectural patterns, library choices, and coding style preferences. 3. **Apply memories silently.** Incorporate remembered preferences into responses and tool usage without announcing them. When a memory dictates a package manager, testing framework, or naming convention, follow it automatically. 4. **Store new memories.** When significant decisions occur -- library selections, architectural choices, user-stated preferences, or tool rejections -- write them to the memory file with a timestamp. Add entries via the `/remember` command or through automatic capture of conversation signals. 5. **Resolve conflicts.** When a stored memory contradicts a current explicit request, prioritize the current request. Flag the conflict if appropriate and update the memory entry to reflect the new decision. Remove outdated memories that no longer apply. 6. **Handle cleanup.** When memory entries exceed 10, consolidate by removing noise (greetings, acknowledgments) and preserving high-value entries (preferences, decisions, corrections). The cleanup threshold is configurable in `hooks/stop_cleanup.py`. ## Output - Automatic loading of stored memories at session start - Silent application of remembered preferences to tool usage and responses - New memory entries written with timestamps for significant decisions - Consolidated memory file after cleanup (preserves important entries, removes noise) - Explicit memory listing via `/memories` command ## Error Handling | Error | Cause | Solution | |-------|-------|----------| | Memory file not found | First session or file deleted | Initialize a new memory file at `.claude/memories/project_memory.json` with an empty JSON structure | | Conflicting memories | Multiple entries contradict each other | Apply the most recent memory; suggest cleanup via `/forget` to remove outdated entries | | Invalid memory format | File corrupted or manually edited with syntax errors | Back up the existing file, recreate with valid JSON structure, restore recoverable entries | | Permission denied | File or directory lacks read/write permissions | Check file permissions on `.claude/memories/`; request necessary access or use an alternative storage location | ## Examples **Automatic preference recall across sessions:** ``` Session 1: User: "Always use Vitest instead of Jest for this project" → Stored to project_memory.json Session 2: User: "Add tests for the auth module" → Memory loaded: "use Vitest instead of Jest" → Test files created with Vitest syntax automatically ``` **Manual memory management:** ```bash /remember "This project uses Tailwind CSS v4 with the Vite plugin" /remember "Deploy to Cloudflare Workers, not Vercel" /memories # Lists all stored memories with timestamps /forget "Vercel" # Removes the Vercel-related memory ``` **Tool rejection captured as correction:** ``` set -euo pipefail User declines a suggested `npm install` action → Memory stored: "User prefers pnpm over npm" → Future sessions use pnpm automatically ``` ## Resources - `${CLAUDE_SKILL_DIR}/references/implementation.md` -- Step-by-step guide for accessing, applying, updating, and resolving memory conflicts - `${CLAUDE_SKILL_DIR}/references/errors.md` -- Detailed error scenarios with recovery procedures - `/remember [text]` -- Add a new memory entry manually - `/forget [text]` -- Remove a matching memory from storage - `/memories` -- Display all currently stored memories with timestamps
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
bbcc1b9f30e4full audit observations/trust-audit/skill/jeremylongshore__memory.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | bbcc1b9f30e4 | SAFE | B | 89 | first audit |
Questions
What does the Memory skill do?
Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.
Is Memory safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Memory access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Memory work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (bbcc1b9f30e4), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.