Claude Code, Skill
Synapse Memory
Perpetual memory and shared brain for Claude Code.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit c4f5b3e3727c, unchanged since the check below.
SECRETS_PATH_DOTENV
Why this grade
- SECRETS_PATH_DOTENV Low
Mentions a .env file.
SKILL.md, line 210
ction rule: never store secrets, tokens, .env values, or personal identifiers." \
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
SKILL.md, line 210
ction rule: never store secrets, tokens, .env values, or personal identifiers." \
README.md, line 135
- **Secrets, tokens, .env values and personal identifiers are never stored** - it's a hard rule in the protocol, not a setting.
SKILL.md, line 20
**Your data:** plain markdown files on YOUR machine - `~/.claude/brain/` (global) + `<project>/.claude/memory/` (per project). No cloud, no telemetry, no lock-in: delete the folder
Show more
SKILL.md, line 129
Then **scan the project** (structure, package/config files, git log, routes, schema - never read `.env` contents) and generate a real, no-placeholder `.claude/memory/primer.md` (HA
SKILL.md, line 266
4. **Secrets, tokens, credentials, .env values, personal identifiers → NOWHERE. Ever.** This is non-negotiable and applies even if the user asks casually; confirm explicitly before
SKILL.md, line 405
- No secrets, tokens, keys, .env values, or personal identifiers in ANY memory file - even if asked casually; confirm before storing anything borderline.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit c4f5b3e3727c. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: c4f5b3e3727cef687d6328d2fb6ba678d60ab708
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.