Scan Report
0 /100
agent-memory-kit
Structured episodic/semantic/procedural memory framework for agents
This is a clean, documentation-focused memory management skill with no malicious behavior, no sensitive data access, and no undeclared capabilities.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | READ | ✓ Aligned | lib/search.sh reads only $WORKSPACE/memory/ files |
| Network | NONE | NONE | — | No network requests in any file |
| Shell | NONE | READ | ✓ Aligned | lib/search.sh uses find/grep locally on memory directory only |
| Environment | NONE | NONE | — | No environment variable access |
| Skill Invoke | NONE | NONE | — | No skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser access |
| Database | NONE | NONE | — | No database access |
4 findings
Medium External URL 外部 URL
https://img.shields.io/badge/GitHub-reflectt-blue?logo=github README.md:3 Medium External URL 外部 URL
https://img.shields.io/badge/License-MIT-yellow.svg README.md:4 Medium External URL 外部 URL
https://opensource.org/licenses/MIT README.md:4 Medium External URL 外部 URL
https://img.shields.io/badge/Team-Reflectt-purple README.md:5 File Tree
21 files · 99.1 KB · 4669 lines Markdown 17f · 4172L
Shell 2f · 465L
Text 1f · 27L
JSON 1f · 5L
├─
▾
helpers
│ └─
check-compaction.sh
Shell
├─
▾
lib
│ ├─
search.sh
Shell
│ └─
synonyms.txt
Text
├─
▾
templates
│ ├─
ARCHITECTURE.md
Markdown
│ ├─
compaction-survival.md
Markdown
│ ├─
context-snapshot-template.md
Markdown
│ ├─
daily-template-v2.md
Markdown
│ ├─
daily-template.md
Markdown
│ ├─
feedback.md
Markdown
│ ├─
procedure-template-v2.md
Markdown
│ └─
procedure-template.md
Markdown
├─
_meta.json
JSON
├─
CHANGELOG.md
Markdown
├─
EXAMPLES.md
Markdown
├─
INSTALL-SEARCH.md
Markdown
├─
INSTALLATION.md
Markdown
├─
QUICKSTART-SEARCH.md
Markdown
├─
README.md
Markdown
├─
SEARCH.md
Markdown
├─
SKILL.md
Markdown
└─
TESTING.md
Markdown
Security Positives
✓ SKILL.md declares 'Dependencies: None (markdown only)' — accurate and honest
✓ No credential, token, or sensitive file access anywhere in the codebase
✓ No network requests or external data exfiltration
✓ No obfuscation, encoded commands, or suspicious patterns
✓ No remote script execution (curl|bash, wget|sh)
✓ No supply chain risk — no dependencies to install
✓ lib/search.sh only operates within a scoped memory directory ($WORKSPACE/memory/)
✓ helpers/check-compaction.sh is purely informational with no side effects
✓ All functionality is fully documented in README.md and markdown files
✓ No sensitive paths (~/.ssh, ~/.aws, .env) accessed