{"data":{"skill":{"slug":"sickn33-agent-memory-systems","name":"agent-memory-systems","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/agent-memory-systems","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"3a7347ec-5fe6-4e16-b1ba-3c8d3be70e47","skill_id":"0c440398-af84-42ab-9894-08a01d0db544","version":5,"content_hash":"v3:ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006:2003324855b6937675d21ad41925d38538d3a1076b8f734149b5d27ecb2152c9:a746e8e4ddbb89f810bc59eeaeb683d53a884aa17936e09df1ec4d28e052ad5a:736b696c6c732f7369636b6e33332f6167656e742d6d656d6f72792d73797374656d73:c53e77530ec107fba4774a5b22f25102","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 12 static findings are false positives caused by educational examples, ordinary prose, or Markdown formatting. No executable payload, credential exposure, malicious network activity, or prompt injection was found in the skill.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":1069,"line_start":1069}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":243,"line_start":243}]},{"factor":"env_access","evidence":[{"file":"SKILL.md","line_end":116,"line_start":116},{"file":"SKILL.md","line_end":209,"line_start":209},{"file":"SKILL.md","line_end":209,"line_start":209}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":1089,"audit_model":"codex","audited_at":"2026-07-23T20:20:32.13+00:00","created_at":"2026-07-26T00:13:42.904741+00:00","static_findings":[{"id":"external_commands:SKILL.md:1069:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Works well with: `autonomous-agents`, `multi-agent-orchestration`, `llm-architect`, `agent-tool-buil","category":"external_commands","line_end":1069,"severity":"medium","line_start":1069},{"id":"network:SKILL.md:243:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"client = QdrantClient(url=\"http://localhost:6333\")","category":"network","line_end":243,"severity":"low","line_start":243},{"id":"env_access:SKILL.md:116:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"connection_string=os.environ[\"POSTGRES_URL\"]","category":"env_access","line_end":116,"severity":"low","line_start":116},{"id":"env_access:SKILL.md:209:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"pc = Pinecone(api_key=os.environ[\"PINECONE_API_KEY\"])","category":"env_access","line_end":209,"severity":"low","line_start":209},{"id":"env_access:SKILL.md:209:generic-api-secret-keys","file":"SKILL.md","pattern":"Generic API/secret keys","snippet":"pc = Pinecone(api_key=os.environ[\"PINECONE_API_KEY\"])","category":"env_access","line_end":209,"severity":"high","line_start":209},{"id":"blocker:SKILL.md:69:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Weaviate - When: Hybrid search, knowledge graph features Note: GraphQL interface, good for relatio","category":"blocker","line_end":69,"severity":"low","line_start":69},{"id":"blocker:SKILL.md:106:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- \"How did I solve this before?\"","category":"blocker","line_end":106,"severity":"low","line_start":106},{"id":"blocker:SKILL.md:159:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"key=user_id","category":"blocker","line_end":160,"severity":"low","line_start":159},{"id":"blocker:SKILL.md:200:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| Hybrid     | No       | Yes    | Best     | No       | Yes      |","category":"blocker","line_end":200,"severity":"low","line_start":200},{"id":"blocker:SKILL.md:702:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"## Use hybrid search (semantic + keyword)","category":"blocker","line_end":702,"severity":"low","line_start":702},{"id":"blocker:SKILL.md:707:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"# Hybrid search with fusion","category":"blocker","line_end":707,"severity":"low","line_start":707},{"id":"blocker:SKILL.md:1007:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Message: Vector query without user filtering. Always filter by user_id to prevent data leakage.","category":"blocker","line_end":1007,"severity":"low","line_start":1007}],"finding_verdicts":[{"id":"external_commands:SKILL.md:1069:ruby-shell-backtick-execution","reason":"Line 1069 uses Markdown backticks to format related skill names. It does not contain Ruby syntax or a shell command.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:243:hardcoded-url","reason":"The URL is a localhost Qdrant endpoint in an educational client example. It neither targets an external host nor sends data.","verdict":"false_positive","confidence":0.98},{"id":"env_access:SKILL.md:116:python-environment-access","reason":"The example reads a PostgreSQL connection string from an environment variable. This is standard secret handling in documentation, with no disclosure or transmission logic.","verdict":"false_positive","confidence":0.97},{"id":"env_access:SKILL.md:209:python-environment-access","reason":"The Pinecone example reads its API key from an environment variable. The documentation does not print, store, or exfiltrate the value.","verdict":"false_positive","confidence":0.98},{"id":"env_access:SKILL.md:209:generic-api-secret-keys","reason":"The text names an environment variable but contains no literal secret. Loading a key from the environment is the expected secure configuration pattern.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:69:system-reconnaissance","reason":"This line describes Weaviate features in a vector-store comparison. It performs no system discovery or reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:106:system-reconnaissance","reason":"This is a natural-language example of a procedural-memory question. It does not request host, account, network, or environment information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:159:system-reconnaissance","reason":"The line passes a user identifier as a memory lookup key. It is application-level data access, not system reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:200:system-reconnaissance","reason":"The line is a comparison-table row showing hybrid-search support. It contains no instructions or code for reconnaissance.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:702:system-reconnaissance","reason":"This heading recommends hybrid search for memory retrieval. The term does not refer to system discovery.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:707:system-reconnaissance","reason":"This is a comment labeling a hybrid-search example. It does not inspect the local system or collect sensitive information.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:1007:system-reconnaissance","reason":"The line is defensive guidance requiring user-scoped vector queries to prevent data leakage. It does not perform reconnaissance.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","subject_content_hash":"2003324855b6937675d21ad41925d38538d3a1076b8f734149b5d27ecb2152c9","subject_tree_hash":"a746e8e4ddbb89f810bc59eeaeb683d53a884aa17936e09df1ec4d28e052ad5a","subject_plugin_path":"skills/sickn33/agent-memory-systems","audit_payload_hash":"c53e77530ec107fba4774a5b22f25102","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","contentHash":"2003324855b6937675d21ad41925d38538d3a1076b8f734149b5d27ecb2152c9","treeHash":"a746e8e4ddbb89f810bc59eeaeb683d53a884aa17936e09df1ec4d28e052ad5a","pluginPath":"skills/sickn33/agent-memory-systems","auditPayloadHash":"c53e77530ec107fba4774a5b22f25102"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-agent-memory-systems/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}