Agent skill · Audited from source
write-agentmemory-skill
skill · rohitg00/agentmemoryApache-2.0 licenceAudited 31 Oct 2026 · source 2e5491e1aacf
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 2e5491e1aacf and found no filesystem, network or shell access and no hard-coded secrets. What it does: The house format and rules for writing or updating an agentmemory skill. Use when adding a new skill, restructuring an existing one, or reviewing a skill contribution for consistency.
Cite
Cite this page
ModelsAtlas. “write-agentmemory-skill (rohitg00/agentmemory)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 2 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (2)
LOWPrompt injectionreview.data_transfer · TROUBLESHOOTING.md
call the REST API directly: 1. Set `AGENTMEMORY_URL` to the daemon base URL (default `http://localhost:3111`). 2. The REST API requires a bearer credential
- Why
- The package instructs the agent to move a local credential to a remote REST endpoint without verifying that the target is a trusted local daemon.
- Fix
- rewrite it so the instruction says plainly what it does, and asks the user before it acts
INFOPrompt injectionprompt.credential_read · TROUBLESHOOTING.md:49
and do not read local credential files.
- Why
- asks the agent to read credentials
- Fix
- —
Audit 0.4.1 · source sha 2e5491e1aacf · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherrohitg00 GitHub userOwner of the repository this skill is read from
- Source folderrohitg00/agentmemory/plugin/skills/write-agentmemory-skillThe exact folder we audited
- LicenceApache-2.0As the repository states it
- Commit pinned for this verdict2e5491e1aacfA new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: The house format and rules for writing or updating an agentmemory skill. Use when adding a new skill, restructuring an existing one, or reviewing a skill contribution for consistency.
--- name: write-agentmemory-skill description: The house format and rules for writing or updating an agentmemory skill. Use when adding a new skill, restructuring an existing one, or reviewing a skill contribution for consistency. user-invocable: false --- agentmemory skills follow one tiered format so they stay skimmable, accurate, and current. Match it exactly. ## Directory layout ```text plugin/skills/<name>/ SKILL.md (required, under 100 lines) REFERENCE.md (optional, dense facts; auto-generate data tables) EXAMPLES.md (optional, worked transcripts) TROUBLESHOOTING.md (generated support file) ``` ## SKILL.md rules - Frontmatter: `name`, `description`, optional `argument-hint`, and `user-invocable`. Set `user-invocable: true` only for skills the user runs as a slash command; reference and knowledge skills are `false`. - Description is two sentences and the only thing the agent sees when deciding to load the skill. Sentence one states the capability. Sentence two starts "Use when" and lists concrete triggers. Keep it distinct from sibling skills, under 1024 chars, third person. - Body order: Quick start (one concrete example), Why (the governing principle), Workflow (numbered steps with decision gates), Anti-patterns (a WRONG vs RIGHT callout for the top mistake), Checklist, See also (cross-link siblings), Reference or Troubleshooting pointer. - Stay under 100 lines. Move dense facts to REFERENCE.md and examples to EXAMPLES.md. - Keep supporting files inside the skill directory so each skill works when installed separately. Link [TROUBLESHOOTING.md](TROUBLESHOOTING.md); the generator copies shared recovery instructions into each skill root. ## Keep it current Facts that exist in source (tool names and parameters, REST endpoints, env vars, connect adapters, hook events) are generated, never hand-typed. Edit the source, then run `npm run skills:gen`. CI runs `npm run skills:check` and fails on drift, so generated tables cannot fall behind the code. ## Style No external or competitor product names. No emojis. No em-dashes. No filler. State the thing and stop. ## Checklist - Description has a "Use when" sentence with real triggers. - SKILL.md is under 100 lines. - No time-sensitive claims and no duplicated troubleshooting block. - Concrete example present; generated facts come from the generator. - Cross-links resolve and go one level deep.
Excerpt, first 2,407 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 2e5491e
git clone https://github.com/rohitg00/agentmemory git -C agentmemory checkout 2e5491e1aacf
The author documents no install command, so this uses the repository directly. Our verdict covers commit 2e5491e1aacf only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
2e5491e1aacf
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
rohitg00/agentmemory
Map of every agentmemory MCP tool, what each does, and its parameters. Use when choosing which memory tool to call, when a tool name or argument is unclear, or when answering what agentmemory can do via MCP.
rohitg00/agentmemory
The agentmemory plugin hooks that capture observations automatically across the agent session lifecycle. Use when explaining how memory gets captured without manual saves, when debugging missing observations, or when…
rohitg00/agentmemory
Set up and diagnose local agentmemory, including MCP, environment variables, ports, and feature flags. Use when getting started, checking a connection, enabling a feature, configuring auth, or explaining why a feature…
rohitg00/agentmemory
How agentmemory wires into host coding agents via the connect command. Use when installing agentmemory into a specific agent, when asked which agents are supported, or when a connect adapter writes the wrong config path.
rohitg00/agentmemory
How agentmemory is built, the iii engine primitives it runs on, its storage model, ports, and the viewer. Use when reasoning about how memory is stored or retrieved end to end, when extending the system, or when…
rohitg00/agentmemory
Trace a file, function, or line back to the agent session that produced its current commit. Use when the user asks "why is this code here", "what was the agent doing when this changed", "who wrote this", or wants…
Add this badge to your README
[](https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/)
<a href="https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/"><img src="https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about write-agentmemory-skill
What does the write-agentmemory-skill skill do?
Is write-agentmemory-skill safe to install?
What can write-agentmemory-skill access on my machine?
Which assistants does write-agentmemory-skill work with?
How current is this page?
Sources
- github.com/rohitg00/agentmemory/tree/main/plugin/skills/write-ag — the audited source at commit 2e5491e1aacf and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the write-agentmemory-skill skill do?
- Is write-agentmemory-skill safe to install?
- What can write-agentmemory-skill access on my machine?