a-green-hand-jack/memory-publication-auditor
skills/memory-publication-auditor/SKILL.md
Audit private skills, memories, notes, or operational logs before turning them into public skills, templates, docs, or reusable patterns. Use when scanning personal/private memory for publishable knowledge, redaction needs, privacy risks, source-visibility leaks, or PR-ready public skill candidates.
$ install --global
skillsauthnpx skillsauth add a-green-hand-jack/ml-research-skills memory-publication-auditorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 16, 2026, 4:24 AM182.6s6 files scanned
SKILL.md
- name:
- memory-publication-auditor
- description:
- Audit private skills, memories, notes, or operational logs before turning them into public skills, templates, docs, or reusable patterns. Use when scanning personal/private memory for publishable knowledge, redaction needs, privacy risks, source-visibility leaks, or PR-ready public skill candidates.
- argument-hint:
- [private-path ...] [--output .agent/publication-audits/<id>/audit.md]
- allowed-tools:
- Read, Write, Edit, Bash, Glob
Memory Publication Auditor
Audit private experience before publication. This skill answers: Which private memory or skill content can become public knowledge, and what must stay private or be redacted?
This is not a copying skill. It is a conservative sieve: private material comes in, sanitized reusable patterns may come out.
Skill Directory Layout
<installed-skill-dir>/
├── SKILL.md
├── scripts/
│ └── scan_publication_candidates.py
├── references/
│ └── classification-policy.md
└── templates/
├── audit-report.md
└── publication-candidate.md
Core Contract
- Default to
private-onlyorneeds-human-reviewwhen uncertain. - Never publish account names, usernames, hostnames, private IPs, tokens, local paths, private server names, unpublished project details, collaborator identities, or raw trajectories.
- Distinguish private facts from publishable operational patterns.
- Produce an audit report first; only draft public skills/docs from sanitized candidates.
- Keep audit artifacts local/private by default under
.agent/publication-audits/.
Classification Labels
private-only: cannot be published, even with light edits.redactable: useful pattern exists, but private identifiers or context must be replaced.publishable: safe as written, after normal quality review.reusable-pattern: abstract method, workflow, checklist, or diagnostic pattern worth turning into a public skill/template.needs-human-review: ambiguous ownership, privacy, copyright, collaborator, or unpublished-project risk.
Workflow
- Read
references/classification-policy.md. - Identify input paths: private skill directories, memory files, notes, sidecar decisions, or sanitized logs.
- Run the deterministic scanner when scanning files:
python3 <installed-skill-dir>/scripts/scan_publication_candidates.py \
--input <private-path> \
--output .agent/publication-audits/<audit-id>/audit.md
- Review the report before reading raw private files in detail.
- Classify each candidate:
- private facts -> keep private
- private facts plus reusable method -> draft a redacted pattern
- already generic workflow -> mark publishable
- If drafting a public artifact, fill
templates/publication-candidate.mdand replace all private specifics with placeholders. - Route next:
- public skill candidate -> create manually or use
skill-system-auditorto check collection fit before adding - docs/template candidate ->
update-docs - private preference ->
personalization-memory - source-visibility risk ->
research-project-memory
- public skill candidate -> create manually or use
Output Rules
- Audit reports may contain redacted evidence snippets, not raw secrets or private context.
- Public candidates must use placeholders such as
<host>,<target-ip>,<project-root>,<user>,<cluster>, and<private-path>. - Do not include concrete private examples from the source material just to make the public version vivid.
- If a claim depends on private evidence, say "derived from private operational memory" rather than exposing the evidence.
Related Skills
a-green-hand-jack/ml-research-bootstrap
testing
VerifiedTrustedCommunity
Bootstrap project-local ml-research-skills. Use from global installs when creating a new ML research project, enabling this collection in an existing ML research repo, or deciding whether to install the full bundle locally. Route to project-init for new projects; do not handle paper or experiment work directly.
4SKILL.mdUpdated May 26, 2026
a-green-hand-jack/project-ops-router
development
VerifiedTrustedCommunity
Route project operations tasks — git, memory, bootstrap, remote, workspace, code review, timeline, ops — to the correct skill. Use when the task involves commits, pushes, worktrees, project memory, enabling project-local skills, SSH/server coordination, sidecar runners, or audits. Do not solve the ops task directly.
4SKILL.mdUpdated May 19, 2026
a-green-hand-jack/paper-writing-router
testing
VerifiedTrustedCommunity
Route ML/AI paper writing tasks to the correct skill — contract planning, prose drafting, section writing, consistency editing, review simulation, rebuttal, submission, or citation work. Use when the task involves writing, revising, reviewing, or submitting a paper instead of guessing between paper-writing-assistant, paper-writing-contract-planner, paper-reviewer-simulator, auto-paper-improvement-loop, or citation skills. Do not draft prose directly.
4SKILL.mdUpdated May 19, 2026
a-green-hand-jack/ml-research-router
data-ai
VerifiedTrustedCommunity
Project-local router for ML research skill selection. Use inside an initialized ML research project, or while maintaining this skill repo, when the user describes an ML research/paper/experiment/discovery/ops/release workflow and may not know the skill; route to a domain router or high-signal leaf. Do not use for generic non-ML projects.
4SKILL.mdUpdated May 19, 2026