0da38f1, the version that was reviewed and scanned here. Newer commits reach this catalog only after a new review. License: Apache-2.0, by Rohit Ghumare.
The user wants to save this to long-term memory: $ARGUMENTS
Quick start
memory_save {
"content": "We rotate JWT refresh tokens on every use; the old token is revoked server-side in auth/refresh.ts.",
"concepts": "jwt-refresh-rotation, token-revocation, auth-flow",
"files": "src/auth/refresh.ts"
}Expected output:
Saved memory abc12345 with 3 concepts: jwt-refresh-rotation, token-revocation, auth-flow.Why
A memory is only as useful as the terms that retrieve it. Tag with specific
concepts so a future recall finds it, and preserve the user's own phrasing.
Workflow
- Pull the core insight, decision, or fact out of
$ARGUMENTS. - Extract 2-5 lowercased concept phrases. Prefer specific over generic
(
jwt-refresh-rotationbeatsauth). - Extract referenced file paths (absolute or repo-relative). Empty if none.
- Call
memory_savewithcontent,concepts(comma-separated string), andfiles(comma-separated string). In a multi-agent setup passagentIdso the memory lands in the right agent's scope. - Confirm the save and echo the concepts so the user knows the retrieval terms.
- To update a fact, save the corrected version outright: near-duplicate content supersedes the old record, which leaves recall but stays in the version chain.
Anti-patterns
WRONG: concepts: "stuff, code, notes" (generic tags nothing can find later).
RIGHT: concepts: "jwt-refresh-rotation, token-revocation" (specific, retrievable).
Checklist
- Content preserves the user's phrasing, not a paraphrase.
- Concepts are specific, lowercased, 2-5 items.
- File paths are real references, not guesses.
- Confirmation echoes the exact concepts tagged.
See also
recall: retrieve what you save here (the pair to this skill).forget: remove a memory you saved by mistake.lesson: behavioral rules from corrections; memories are for facts.memory-discipline: when to save unprompted.
Troubleshooting
See TROUBLESHOOTING.md if memory_save is not available.
The user wants to save this to long-term memory: $ARGUMENTS
Quick start
memory_save {
"content": "We rotate JWT refresh tokens on every use; the old token is revoked server-side in auth/refresh.ts.",
"concepts": "jwt-refresh-rotation, token-revocation, auth-flow",
"files": "src/auth/refresh.ts"
}Expected output:
Saved memory abc12345 with 3 concepts: jwt-refresh-rotation, token-revocation, auth-flow.Why
A memory is only as useful as the terms that retrieve it. Tag with specific
concepts so a future recall finds it, and preserve the user's own phrasing.
Workflow
- Pull the core insight, decision, or fact out of
$ARGUMENTS. - Extract 2-5 lowercased concept phrases. Prefer specific over generic
(
jwt-refresh-rotationbeatsauth). - Extract referenced file paths (absolute or repo-relative). Empty if none.
- Call
memory_savewithcontent,concepts(comma-separated string), andfiles(comma-separated string). In a multi-agent setup passagentIdso the memory lands in the right agent's scope. - Confirm the save and echo the concepts so the user knows the retrieval terms.
- To update a fact, save the corrected version outright: near-duplicate content supersedes the old record, which leaves recall but stays in the version chain.
Anti-patterns
WRONG: concepts: "stuff, code, notes" (generic tags nothing can find later).
RIGHT: concepts: "jwt-refresh-rotation, token-revocation" (specific, retrievable).
Checklist
- Content preserves the user's phrasing, not a paraphrase.
- Concepts are specific, lowercased, 2-5 items.
- File paths are real references, not guesses.
- Confirmation echoes the exact concepts tagged.
See also
recall: retrieve what you save here (the pair to this skill).forget: remove a memory you saved by mistake.lesson: behavioral rules from corrections; memories are for facts.memory-discipline: when to save unprompted.
Troubleshooting
See TROUBLESHOOTING.md if memory_save is not available.
Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-11-07
Partial analysis: some checks could not run on this component.
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Hidden InstructionsPrompt Injection · TROUBLESHOOTING.md:1
- Session PersistenceRogue Agent · TROUBLESHOOTING.md:35
Learn more about NVIDIA SkillSpector.