Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Coding-Dev-Tools/engraphis --skill engraphis-memorygit clone --depth 1 https://github.com/Coding-Dev-Tools/engraphisWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/coding-dev-tools/engraphis/engraphis-memory)<a href="https://agentmods.dev/skills/coding-dev-tools/engraphis/engraphis-memory"><img src="https://agentmods.dev/badge/skills/coding-dev-tools/engraphis/engraphis-memory/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/coding-dev-tools/engraphis/engraphis-memory"><img src="https://agentmods.dev/badge/skills/coding-dev-tools/engraphis/engraphis-memory.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 141 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium Rogue Agent · line 123 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00134 | $0.03555 |
| Opus 5.5 | $0.00054 | $0.01422 |
| Sonnet 5.5 | $0.00027 | $0.00711 |
| Haiku 4.5 | $0.00013 | $0.00356 |
Grade A, and why
engraphis-memory scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Engraphis Memory
Engraphis is a local-first memory engine exposed to agents over MCP. This skill is the
discipline for using it well: what to store, how to scope it, and which tool answers which
question. It assumes the Engraphis MCP server is connected. The default Smart MCP surface has nine
engraphis_* tools (engraphis_session, engraphis_recall_context, engraphis_remember,
engraphis_discover_actions, engraphis_execute_read, engraphis_execute_action,
engraphis_get_memory, engraphis_update_memory, engraphis_conflict_review) and automatically
exposes advanced capabilities through discovery and a validated executor. If those tools are
absent, see Setup. Do not fall back to ad-hoc notes.
Smart tool inventory
| Tool | What it does |
|---|---|
engraphis_session |
Starts or resumes a session, or ends it with a next-session handoff. |
engraphis_recall_context |
Returns one compact, bounded context packet for routine agent work. |
engraphis_remember |
Stores a routine durable memory with safe default provenance and deduplication. |
engraphis_discover_actions |
Returns exact schemas for a small set of matching advanced actions. |
engraphis_execute_read |
Executes only a discovered action that is read-only and idempotent. |
engraphis_execute_action |
Executes a discovered write, admin, or destructive-capable action. |
engraphis_get_memory |
Returns one governed memory record, excluding non-prompt-eligible content. |
engraphis_update_memory |
Edits memory metadata; content changes use the governed correction path. |
engraphis_conflict_review |
Lists pending, quarantined, or conflicting memories for review. |
The Smart gateway exposes these nine tools directly; advanced capabilities remain available through discovery and the validated executors.
Memory here is scoped, typed, bi-temporal, and self-maintaining: writes are deduplicated and contradictions supersede (never silently overwrite), and forgetting lowers priority instead of hard-deleting. You get those guarantees for free if you use the right tool with the right scope.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed · +11 lines aeee7a94671c
- 1mo ago Changed · +16 lines 4bc8979b9ffe
- 1mo ago First seen · 188 lines · 134 tokens per session scan A 0f98098df695
engraphis-memory is a skill published in the GitHub repository Coding-Dev-Tools/engraphis (180 stars, last pushed today), licensed Apache-2.0. It adds 134 tokens to every session and 3,555 once invoked, about $0.0005 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
slm-remember
Capture durable facts, decisions, constraints, and gotchas into SuperLocalMemory. Use when the user says "remember that", "save this decision", "note this constraint", or when a session produces a conclusion worth persisting across sessions. Always recall first to avoid duplicates.
slm-media
Save pictures and PDFs in SuperLocalMemory and find them again by describing them. Covers when to save a picture or document, remembermedia, rememberdocument, getmedia, mediastatus and mediauploadlink, how recall returns pictures and PDF pages, the limits, what stays private, turning the feature on with slm media (16…
slm-session
Manage SuperLocalMemory session lifecycle — call sessioninit once at the start of every fresh session to load relevant project context and get a sessionid; call closesession when work is meaningfully complete to commit temporal summaries. Correct lifecycle hygiene is what makes SLM's learning loop work.
slm-status
Health and optimization stats for SuperLocalMemory — call slmoptimizestats() for live compression and cache counters (compressruns, tokenssavedcompress, cacheproxyhits, cacheproxymisses, cachekvhits, cachekvmisses); run slm status [--json] for system state (mode, profile, DB size, fact/entity/edge counts) and slm…
slm-bot-memory
Cross-bot memory on a shared computer (Grok Bot, Cursor plugin, any host where several agents share one machine). Explains agentid attribution vs. profile/scope access, how to namespace by agentid + profile + scope, and what must never be written to memory. Read this before the first remember/recall on a new…
slm-getting-started-bot
First-session orientation for SuperLocalMemory on a headless bot host (Grok Bot, or any Cursor-format plugin install with no hooks, no dashboard, and no interactive setup wizard). What is different here vs. Claude Code/Codex, which 19 tools are actually available, and the first three calls to make.