Security audit
Security checks for vulnerabilities and agentic risk
This memory skill is not malicious, but it deserves review because it persistently stores conversation-derived identity, relationship, question, and reflection data across sessions without clear retention or deletion controls.
Install only if you intentionally want cross-session memory. Treat the stored memory directory as sensitive, review or delete its files periodically, and avoid enabling heartbeat reflection unless users have clearly opted into post-session analysis and persistence.
"""Save questions to file."""
ensure_dirs()
with open(QUESTIONS_FILE, 'w') as f:
f.write("# Pending Questions\n\n")
f.write(f"_Generated from reflection. Last updated: {datetime.now(timezone.utc).isoformat()}_\n\n")"""Save identity/self-model."""
ensure_dirs()
with open(IDENTITY_FILE, 'w') as f:
f.write("# Identity\n\n")
f.write(f"_Last updated: {datetime.now(timezone.utc).isoformat()}_\n\n")# Save reflection log
reflection_file = REFLECTIONS_DIR / f"{datetime.now().strftime('%Y-%m-%d-%H%M')}.json"
with open(reflection_file, 'w') as f:
json.dump({
"timestamp": datetime.now(timezone.utc).isoformat(),
"analysis": analysisNo suspicious patterns detected.