mnemon

A method for finding, rating, and responding to risks that could affect a software project.

In plain words
What is it for?
Use it to assess technical, staffing, requirement, and outside-service risks, then decide whether to avoid, reduce, transfer, or accept each one.
Why use it?
It helps teams address likely or damaging problems early instead of discovering them only after they delay or disrupt the work.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/mnemon-dev/mnemon/codex
Any agent
npx skills add mnemon-dev/mnemon --skill codex
Clone the repo
git clone --depth 1 https://github.com/mnemon-dev/mnemon

Made for: Claude Code, Codex.

Per session 25 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 647 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00025 $0.00647
Opus 5 $0.00013 $0.00324
Sonnet 5 $0.00005 $0.00129
Haiku 4.5 $0.00003 $0.00065

Measured 2d ago against content hash f1e1bf3de817, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mnemon scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 3 executable files (prime.sh, stop.sh, user_prompt.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

3 near-identical copies found in the catalogue:

  • mnemon — 100% identical, 4 lines differ
  • mnemon — 100% identical, 0 lines differ
  • mnemon — 86% identical, 2 lines differ
internal/memory/setup/assets/codex/SKILL.md · 58 lines

How it starts

The opening of the file, as written. The whole thing — 58 lines — stays where its author put it; the contents beside it link to each section on GitHub.

mnemon

Workflow

  1. Remember: mnemon remember "<fact>" --cat <cat> --imp <1-5> --entities "e1,e2" --source agent
    • Diff is built in: duplicates are skipped, conflicts are auto-replaced.
    • Output includes action (added/updated/skipped), semantic_candidates, and causal_candidates.
  2. Link (evaluate candidates from step 1 using judgment):
    • Review causal_candidates: link only when the memories are genuinely causally related.
    • Review semantic_candidates: high similarity alone is not enough; skip unrelated keyword matches.
    • Syntax: mnemon link <id> <candidate> --type <causal|semantic> --weight <0-1> [--meta '<json>']
  3. Recall: mnemon recall "<query>" --limit 10

Commands

mnemon remember "<fact>" --cat <cat> --imp <1-5> --entities "e1,e2" --source agent
mnemon link <id1> <id2> --type <type> --weight <0-1> [--meta '<json>']
mnemon recall "<query>" --limit 10
mnemon search "<query>" --limit 10
mnemon import --dry-run <file>
mnemon import <file>
mnemon forget <id>
mnemon related <id> --edge causal
mnemon gc --threshold 0.4
mnemon gc --keep <id>
mnemon status
mnemon log
mnemon store list
mnemon store create <name>
mnemon store set <name>
mnemon store remove <name>

Import Historical Chats

When the user asks to import old chats, notes, or exported context, create a memory_draft.json with schema_version: "1", insights entries containing content, category, importance, tags, entities, and optional created_at, plus optional edges using source_index, target_index, edge_type, weight, and reason. Run mnemon import --dry-run <file>, then run mnemon import <file> only after validation passes. After import, verify with mnemon status and a focused mnemon search or mnemon recall. Check the output errors field because imports can partially succeed.

Guardrails

  • Use memory only when it can materially improve continuity or task quality.
  • Do not store secrets, passwords, tokens, private keys, or short-lived operational noise.
  • Categories: preference · decision · insight · fact · context
  • Edge types: temporal · semantic · causal · entity
  • Max 8,000 chars per insight.

Read the full file on GitHub · 58 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 58 lines · 25 tokens per session scan A f1e1bf3de817

Subscribe to this mod's changes

mnemon is a skill published in the GitHub repository mnemon-dev/mnemon (540 stars, last pushed 9d ago), licensed Apache-2.0. It adds 25 tokens to every session and 647 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

kayba-stage-3-metrics

Define metrics from Kayba insights, implement them as Python measurement code, run against traces, and iterate until the metrics are clean and meaningful. Trigger when the user says "run stage 3", "define metrics", "build metrics", "compute baselines", or when invoked by the kayba-pipeline orchestrator. Requires…

kayba-ai/agentic-context-engine · 92 tokens

kayba-stage-4-rubric

Organize computed metrics into a tiered evaluation rubric with leading, lagging, and quality indicators. Trigger when the user says "run stage 4", "build rubric", "tier metrics", or when invoked by the kayba-pipeline orchestrator. Requires eval/baselinemetrics.json and eval/computebaselines.py to exist.

kayba-ai/agentic-context-engine · 77 tokens

kayba-stage-5-action-plan

Triage each insight into discard/code-fix/prompt-fix and produce a prioritized action plan with specific recommendations. Trigger when the user says "run stage 5", "make action plan", "triage skills", or when invoked by the kayba-pipeline orchestrator. Requires eval outputs from stages 1-4.

kayba-ai/agentic-context-engine · 74 tokens

kayba-stage-6-hitl

Human-In-The-Loop gate that presents the action plan with full context, collects an informed approval/modification/rejection decision, and records the outcome. Trigger when the user says "run stage 6", "HITL review", "approve action plan", or when invoked by the kayba-pipeline orchestrator. Requires eval/actionplan.md…

kayba-ai/agentic-context-engine · 87 tokens

kayba-stage-2-domain-context

Gather domain context about the repository and agent — system prompt, tool definitions, domain docs, and behavior patterns from traces. Trigger when the user says "run stage 2", "gather context", "domain context", or when invoked by the kayba-pipeline orchestrator.

kayba-ai/agentic-context-engine · 64 tokens

kayba-stage-7-fixer

Implement the approved fixes from the action plan and log all changes. Trigger when the user says "run stage 7", "implement fixes", "apply action plan", or when invoked by the kayba-pipeline orchestrator. Requires eval/actionplan.md to exist.

kayba-ai/agentic-context-engine · 61 tokens