CtrlK
BlogDocsLog inGet started
Tessl Logo

persistent-memory

Persists context across conversations as plain markdown so every future session can enrich a topic-scoped memory (e.g. `project-acme`). Four operations: `write` (extract candidates, resolve as ADD / UPDATE / DELETE / NOOP per Mem0), `read` (load a ≤ 200-line INDEX, fetch detail on demand), `consolidate` (sleep-style merge + prune), `forget` (delete or redact with audit). Three storage tiers: home (`~/.agent-memory/<scope>/`, default), project-local (gitignored), project-shared (committed). Enforces a never-store list (secrets, keys, financial and identity numbers) and a consent preview before every write. `rules/scaling-tiers.md` covers scaling to SQLite FTS, vector DB, and managed memory, plus the LoreKit backend the self-improvement loops run on: scope mapping, the `loop::<skill>-lessons` tag and key convention, and the shared lesson schema. Triggers on "remember this", "save to memory", "recall memory", "what do you remember about", "consolidate memory", "forget that", "/persistent-memory".

67

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security
Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The persistent-memory write pipeline extracts candidate facts from the conversation turns and user-provided inputs, which can contain outsider-authored free text if an integrated host workflow processes external inputs.

Report incorrect finding
Repository
mthines/agent-skills
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.