Security audit
Security checks for vulnerabilities and agentic risk
This markdown-only skill gives disclosed instructions for reorganizing local agent memory files, with no hidden code, network access, credential use, or automatic installer behavior.
Install only if you want an agent to reorganize and sometimes delete stale local memory/task files. Review proposed changes before applying them, especially pruning or scheduled runs, because the main residual risk is accidental loss of useful memory rather than hidden malicious behavior.
The activation text says to run when a user asks to "clean up, reorganize, or defrag memory," which includes broad phrases like "clean up" or "reorganize" that can occur in ordinary conversation. The file does not provide explicit trigger phrases, exclusions, or negative examples to distinguish intended invocation from routine requests.
The documentation says to preserve raw daily notes and not delete or modify memory/YYYY-MM-DD.md files as an audit trail, but later states that completed tasks older than 14 days can be removed. Since memory/tasks/ is explicitly part of the skill's managed memory area, this creates contradictory retention guidance about preserving historical memory artifacts versus deleting them.
