Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

write-agentmemory-skill

skill · rohitg00/agentmemoryApache-2.0 licenceAudited 31 Oct 2026 · source 2e5491e1aacf

★ 30,039pushed 1 day ago
✓SAFEGrade B · 89/100 · 31 Oct 2026 · 2e5491e
30,039repo stars · whole rohitg00/agentmemory

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 2e5491e1aacf and found no filesystem, network or shell access and no hard-coded secrets. What it does: The house format and rules for writing or updating an agentmemory skill. Use when adding a new skill, restructuring an existing one, or reviewing a skill contribution for consistency.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “write-agentmemory-skill (rohitg00/agentmemory)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill

Trust audit

Audit 0.4.1 · source read 31 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium1 low1 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS2
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (2)

LOWPrompt injectionreview.data_transfer · TROUBLESHOOTING.md
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
call the REST API directly:

1. Set `AGENTMEMORY_URL` to the daemon base URL (default `http://localhost:3111`).
2. The REST API requires a bearer credential
Why
The package instructs the agent to move a local credential to a remote REST endpoint without verifying that the target is a trusted local daemon.
Fix
rewrite it so the instruction says plainly what it does, and asks the user before it acts
INFOPrompt injectionprompt.credential_read · TROUBLESHOOTING.md:49
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
and do not read local credential files.
Why
asks the agent to read credentials
Fix
—

Audit 0.4.1 · source sha 2e5491e1aacf · 31 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherrohitg00 GitHub userOwner of the repository this skill is read from
  • Source folderrohitg00/agentmemory/plugin/skills/write-agentmemory-skillThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdict2e5491e1aacfA new audit runs when the source changes
  • Repository statusNot archivedLast push 1 day ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: The house format and rules for writing or updating an agentmemory skill. Use when adding a new skill, restructuring an existing one, or reviewing a skill contribution for consistency.

---
name: write-agentmemory-skill
description: The house format and rules for writing or updating an agentmemory skill. Use when adding a new skill, restructuring an existing one, or reviewing a skill contribution for consistency.
user-invocable: false
---

agentmemory skills follow one tiered format so they stay skimmable, accurate, and current. Match it exactly.

## Directory layout

```text
plugin/skills/<name>/
  SKILL.md      (required, under 100 lines)
  REFERENCE.md  (optional, dense facts; auto-generate data tables)
  EXAMPLES.md   (optional, worked transcripts)
  TROUBLESHOOTING.md (generated support file)
```

## SKILL.md rules

- Frontmatter: `name`, `description`, optional `argument-hint`, and `user-invocable`. Set `user-invocable: true` only for skills the user runs as a slash command; reference and knowledge skills are `false`.
- Description is two sentences and the only thing the agent sees when deciding to load the skill. Sentence one states the capability. Sentence two starts "Use when" and lists concrete triggers. Keep it distinct from sibling skills, under 1024 chars, third person.
- Body order: Quick start (one concrete example), Why (the governing principle), Workflow (numbered steps with decision gates), Anti-patterns (a WRONG vs RIGHT callout for the top mistake), Checklist, See also (cross-link siblings), Reference or Troubleshooting pointer.
- Stay under 100 lines. Move dense facts to REFERENCE.md and examples to EXAMPLES.md.
- Keep supporting files inside the skill directory so each skill works when installed separately. Link [TROUBLESHOOTING.md](TROUBLESHOOTING.md); the generator copies shared recovery instructions into each skill root.

## Keep it current

Facts that exist in source (tool names and parameters, REST endpoints, env vars, connect adapters, hook events) are generated, never hand-typed. Edit the source, then run `npm run skills:gen`. CI runs `npm run skills:check` and fails on drift, so generated tables cannot fall behind the code.

## Style

No external or competitor product names. No emojis. No em-dashes. No filler. State the thing and stop.

## Checklist

- Description has a "Use when" sentence with real triggers.
- SKILL.md is under 100 lines.
- No time-sensitive claims and no duplicated troubleshooting block.
- Concrete example present; generated facts come from the generator.
- Cross-links resolve and go one level deep.

Excerpt, first 2,407 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 2e5491e

Download folder ↗
git clone https://github.com/rohitg00/agentmemory
git -C agentmemory checkout 2e5491e1aacf

The author documents no install command, so this uses the repository directly. Our verdict covers commit 2e5491e1aacf only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 2e5491e1aacf

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/badge.svg)](https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

agentmemory-mcp-tools✓SAFE

rohitg00/agentmemory

Map of every agentmemory MCP tool, what each does, and its parameters. Use when choosing which memory tool to call, when a tool name or argument is unclear, or when answering what agentmemory can do via MCP.

★ 30kGrade B
agentmemory-hooks✓SAFE

rohitg00/agentmemory

The agentmemory plugin hooks that capture observations automatically across the agent session lifecycle. Use when explaining how memory gets captured without manual saves, when debugging missing observations, or when…

★ 30kGrade B
agentmemory-config!CAUTION

rohitg00/agentmemory

Set up and diagnose local agentmemory, including MCP, environment variables, ports, and feature flags. Use when getting started, checking a connection, enabling a feature, configuring auth, or explaining why a feature…

★ 30kGrade B
agentmemory-agents✓SAFE

rohitg00/agentmemory

How agentmemory wires into host coding agents via the connect command. Use when installing agentmemory into a specific agent, when asked which agents are supported, or when a connect adapter writes the wrong config path.

★ 30kGrade B
agentmemory-architecture✓SAFE

rohitg00/agentmemory

How agentmemory is built, the iii engine primitives it runs on, its storage model, ports, and the viewer. Use when reasoning about how memory is stored or retrieved end to end, when extending the system, or when…

★ 30kGrade B
Commit Context✓SAFE

rohitg00/agentmemory

Trace a file, function, or line back to the agent session that produced its current commit. Use when the user asks "why is this code here", "what was the agent doing when this changed", "who wrote this", or wants…

★ 29kGrade B

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/badge.svg)](https://modelsatlas.com/skills/rohitg00/write-agentmemory-skill/)

Questions about write-agentmemory-skill

What does the write-agentmemory-skill skill do?
#1 Persistent memory for AI coding agents based on real-world benchmarks
Is write-agentmemory-skill safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can write-agentmemory-skill access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does write-agentmemory-skill work with?
Its documentation mentions claude-code, codex and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (2e5491e1aacf), read on 2026-10-31. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.