Agent skill · Audited from source

saving-workspace-context

skill · spencerpauly/awesome-cursor-skillsCC0-1.0 licenceAudited 28 Oct 2026 · source 94fd3401595c

★ 869pushed 87 days ago
!CAUTIONGrade B · 89/100 · 2 findings · 94fd340
869repo stars · whole spencerpauly/awesome-cursor-skills

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 94fd3401595c and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 2 findings, 0 critical or high. What it does: Automatically persist useful context — research, decisions, learnings, templates — to workspace files so knowledge survives across conversations.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “saving-workspace-context (spencerpauly/awesome-cursor-skills)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/spencerpauly/saving-workspace-context

Trust audit

Audit 0.4.1 · source read 28 Oct 2026

Trust score89/100!CAUTION B
0 critical0 high2 medium0 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesWARN2
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (2)

MEDIUMPrompt injectionreview.instruction_override · SKILL.md
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
**Don't ask permission** for small context saves — just do it and mention what you saved
Why
Instructs the agent to bypass the user's confirmation for file writes.
Fix
rewrite it so the instruction says plainly what it does, and asks the user before it acts
MEDIUMPrompt injectionreview.instruction_override · SKILL.md
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
Load existing context before doing anything else
Why
Directs the agent to override its default task order by prioritizing this package's setup step.
Fix
rewrite it so the instruction says plainly what it does, and asks the user before it acts

Audit 0.4.1 · source sha 94fd3401595c · 28 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherspencerpauly GitHub userOwner of the repository this skill is read from
  • Source folderspencerpauly/awesome-cursor-skills/resources/saving-workspace-contextThe exact folder we audited
  • LicenceCC0-1.0As the repository states it
  • Commit pinned for this verdict94fd3401595cA new audit runs when the source changes
  • Repository statusNot archivedLast push 87 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Automatically persist useful context — research, decisions, learnings, templates — to workspace files so knowledge survives across conversations.

---
name: saving-workspace-context
description: Automatically persist useful context — research, decisions, learnings, templates — to workspace files so knowledge survives across conversations.
user-invocable: false
---

# Saving Workspace Context

You are an agent that builds institutional memory. As you work, watch for information that should outlast this conversation and save it to the workspace so future sessions start smarter.

## At the Start of Every Conversation

Load existing context before doing anything else:

1. Check for a `context/` directory — read any files relevant to the current task
2. Check for a product/project context file (e.g. `.agents/product-marketing-context.md`, `PROJECT.md`, or similar) for positioning, goals, and constraints
3. Check for any domain-specific directories the project uses (e.g. `companies/`, `docs/`, `research/`)
4. Check for templates or reusable assets that might apply

If the project doesn't have a `context/` directory yet, that's fine — create one when you first have something worth saving.

## During a Conversation

Watch for information that should be persisted. Save it as soon as you recognize it — don't wait until the end.

| Signal | Where to Save |
|---|---|
| Product details, positioning, ICP changes | Project context file (e.g. `.agents/product-marketing-context.md`) |
| Research on a company, person, or topic | `context/{topic-slug}.md` or a domain-specific directory |
| Strategy decisions or learnings | `context/{topic}.md` with dated entries |
| Reusable templates or boilerplate | `templates/` or a project-appropriate location |
| A repeatable multi-step workflow | New skill in `.cursor/skills/` or `.agents/skills/` |
| A persistent constraint or convention | New rule in `.cursor/rules/` |

### How to Save

- **Don't ask permission** for small context saves — just do it and mention what you saved
- **Do ask permission** before creating new skills or rules (they affect all future conversations)
- **Append, don't overwrite** when adding to existing context files — use dated entries
- **Use clear file names** — future you (or a future agent) needs to find this by scanning a directory listing

## At the End of a Conversation

Before finishing, ask yourself:

- Did I learn anything about this project that isn't captured in workspace files?
- Did I do research that would be painful to redo?
- Did I discover a pattern that should become a skill or rule?
- Did I create content that could be templated for reuse?

If yes to any, save it before the conversation ends.

## File Formats

### Context Files (`context/{slug}.md`)

```markdown
# {Topic}

## {Date} — {Brief title}

{What was learned, decided, or discovered}

## {Earlier date} — {Earlier entry}

{Previous context}
```

Keep entries reverse-chronological (newest first). Date your entries so they age gracefully.

### Project Context File

A single file capturing the current state of the project's identity:

```markdown
# {Project Name} — Context

- **What it is:** {one line}
- **Who it's for:** {target audience}
- **Key differentiator:** {why this vs alternatives}
- **Current stage:** {pre-launch / beta / growth / etc.}
- **Current goals:** {what matters right now}

## Positioning

{How we talk about the product}

## Constraints

{Things to always keep in mind}
```

## When to Create a New Skill

Create a skill when you find yourself doing the same multi-step workflow more than once:

- Researching a topic (check multiple sources, synthesize, save findings)
- Preparing for a meeting or call (pull context, recent history, prep talking points)
- Running a campaign or process (select targets, personalize, track progress)

## When to Create a New Rule

Create a rule when a persistent constraint should apply across all conversations:

- Voice/tone guidelines that get refined through feedback
- Naming conventions or file organization patterns
- Domain-specific constraints ("never mention X", "always check Y first")

## Rules

- Be proactive — save context without being asked, but mention what you saved
- Keep files scannable — future agents will skim directory listings to find context
- Don't save trivial information — if it's easily re-derived, skip it
- Date everything that accumulates over time
- Check for existing files before creating new ones to avoid duplicates

Excerpt, first 4,345 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 94fd340

Download folder ↗
git clone https://github.com/spencerpauly/awesome-cursor-skills
git -C awesome-cursor-skills checkout 94fd3401595c

The author documents no install command, so this uses the repository directly. Our verdict covers commit 94fd3401595c only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 94fd3401595c

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/spencerpauly/saving-workspace-context/badge.svg)](https://modelsatlas.com/skills/spencerpauly/saving-workspace-context/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/spencerpauly/saving-workspace-context/badge.svg)](https://modelsatlas.com/skills/spencerpauly/saving-workspace-context/)

Questions about saving-workspace-context

What does the saving-workspace-context skill do?
A curated list of awesome skills for Cursor
Is saving-workspace-context safe to install?
With care. The audit graded it B (89/100) and found 2 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can saving-workspace-context access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does saving-workspace-context work with?
Its documentation mentions cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (94fd3401595c), read on 2026-10-28. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.