memory-organizer
智能对话分析与记忆整理助手。获取并压缩指定 Agent 的对话记录，用于在用户授权/触发条件满足时，将信息分类写入 USER.md / AGENT.md / MEMORY.md（含索引与 memory/ 日志）/ IDENTITY.md / SOUL.md。
58
66%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./app/skills/memory-organizer/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
该技能在运行时通过 `scripts/fetch_conversations.py` 调用 Sage 后端接口读取会话/消息内容（`/api/conversations` 以及随后 `/api/conversations/{session_id}/messages`），并将 USER/Assistant 文本拼接输出给后续“可能的记忆提取”（即 LLM 会接触到外部用户在对话中提交的自由文本）。
- Repository
- ZHangZHengEric/Sage
- Commit
ce79d60
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.