Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add LogicLabsAI/ultramemory-mcp --skill atomic-level-checklist-md-confirm-approval-neededgit clone --depth 1 https://github.com/LogicLabsAI/ultramemory-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/logiclabsai/ultramemory-mcp/atomic-level-checklist-md-confirm-approval-needed)<a href="https://agentmods.dev/skills/logiclabsai/ultramemory-mcp/atomic-level-checklist-md-confirm-approval-needed"><img src="https://agentmods.dev/badge/skills/logiclabsai/ultramemory-mcp/atomic-level-checklist-md-confirm-approval-needed/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/logiclabsai/ultramemory-mcp/atomic-level-checklist-md-confirm-approval-needed"><img src="https://agentmods.dev/badge/skills/logiclabsai/ultramemory-mcp/atomic-level-checklist-md-confirm-approval-needed.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00017 | $0.00995 |
| Opus 5 | $0.00009 | $0.00498 |
| Sonnet 5 | $0.00003 | $0.00199 |
| Haiku 4.5 | $0.00002 | $0.00100 |
Grade A, and why
atomic-level-checklist-md-confirm-approval-needed scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 56 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Create a step-by-step atomic-level checklist as a .md file so we can walk through every item and make sure nothing is missed.
The loop — slower than you want to move, ALWAYS
-
Smoke-test FIRST (baseline). Before writing the plan, look at the current state from multiple angles. Run the read-only checks that tell us what's already there, what's broken, what the expected behavior is. Write the baseline into the checklist as "BEFORE" state so we have a diff anchor.
-
Build the atomic checklist .md with this structure per item:
- Every atomic step MUST begin with a GitHub-flavored markdown checkbox:
- [ ]— so we can visually confirm completion at a glance. Unchecked = not done.[x]= done AND verified. Never mark[x]until the verification command has passed. - What to do (exact file + line / exact command)
- Why (root cause / constraint / contract the item serves)
- Verification command (proves it happened — not "ran without error," but "state matches expectation")
- Rollback path (how to undo in one step)
- Owner (which parallel agent or master)
Example row format:
- [ ] **P1.3 — Cap Redis at 512MB with allkeys-lru** - File: `docker-compose.yml` line 47 (redis service command) - Why: Redis was unbounded → OOM risk under load - Verify: `docker exec redis redis-cli CONFIG GET maxmemory` → returns `536870912` - Rollback: `git revert <commit>` - Owner: worker-A - Every atomic step MUST begin with a GitHub-flavored markdown checkbox:
-
Break the checklist into clusters that can run in parallel without conflicting (no shared-file writes, no single-writer constraints, no sequential dependencies). Master agent assigns clusters to parallel workers.
-
Explain the plan back to the user in plain English — what I think I'm about to do, why, where the risk is. Do NOT start any work until the user approves.
Rules during execution (non-negotiable)
- Workers DO NOT RUSH. Every worker takes the time to verify its own work before reporting complete. If a step fails or looks wrong, STOP and report — do not paper over it to stay on pace. Quality over speed is a hard rule; speed-rushing is how bugs get shipped.
- Each worker self-verifies every checkbox it closes. Not "I ran the command" — actually re-read the file, re-query the state, confirm the intended change is present. Only THEN flip
- [ ]→- [x]and paste the verification command's actual output as evidence directly below the item. - Scope discipline — if a worker sees something adjacent that looks wrong but isn't in its cluster, REPORT IT, do not fix it. One item per checkbox. Drifting out of scope causes merge conflicts and untracked changes.
- No forbidden flag-words ("quick fix", "workaround", "patch", "temporary", "good enough", "hack"). If one appears, stop and propose an architectural alternative.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 56 lines · 17 tokens per session scan A 2c24506c9b75
atomic-level-checklist-md-confirm-approval-needed is a skill published in the GitHub repository LogicLabsAI/ultramemory-mcp (1 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 17 tokens to every session and 995 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
dashboard
Open OwnMem Console, the local dashboard for this repository's memory. Use when the user asks to open the dashboard, see memory metrics, check adoption or recall quality, or set up the optional embedding lane. Requires a repository initialized with the dashboard layer.
recall
Recall this repository's OwnMem local memory before changing code, and keep it healthy. Use when a repository contains .ownmem/, when past debugging lessons could apply ("have we hit this before", "why is it done this way"), or when the user mentions ownmem, project memory, or recalling across sessions.
init
Install or update OwnMem in the current repository. Use when the user asks to set up OwnMem, add local project memory for coding agents, or refresh an existing OwnMem installation after a version bump.
memory-write
Captures a durable fact to project memory through the kit's safe write path (PoisonGuard secret/injection screening + home-path sanitization + dedup + conflict detection) — preferring the cmk MCP tools (mkremember / mkforget / mktrust) when connected, falling back to the cmk CLI. Use when the user says "remember…
bootstrap
Scaffolds the core-memory-kit directory structure (context/, scripts/, cron/jobs/) into the current project. Idempotent — never overwrites existing files. Run once per project after installing the plugin. Use when the user says "bootstrap the memory system", "set up memory here", or "scaffold the memory kit".
troubleshooting
Diagnoses and repairs core-memory-kit itself when the memory system is broken — the per-failure-code repair book. Fire whenever a "⚠ [core-memory-kit]" whisper appears on the prompt (it names the failure and points here), or when the user reports a kit symptom however they phrase it: memory is not being saved, nothing…