Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/vectorize-io/hindsight/hindsight-cloudnpx skills add vectorize-io/hindsight --skill hindsight-cloudgit clone --depth 1 https://github.com/vectorize-io/hindsightWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00039 | $0.01478 |
| Opus 5 | $0.00019 | $0.00739 |
| Sonnet 5 | $0.00008 | $0.00296 |
| Haiku 4.5 | $0.00004 | $0.00148 |
Grade D, and why
hindsight-cloud scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
chmod 600 ~/.hindsight/config Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://hindsight.vectorize.io/get-cli | bash Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://hindsight.vectorize.io/get-cli | bash Copies of this mod
3 near-identical copies found in the catalogue:
- hindsight-cloud — 100% identical, 0 lines differ
- hindsight-self-hosted — 94% identical, 17 lines differ
- hindsight-self-hosted — 94% identical, 17 lines differ
How it starts
The opening of the file, as written. The whole thing — 150 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Hindsight Memory Skill (Cloud)
You have persistent memory via Hindsight Cloud. This memory bank is shared with the team, so knowledge stored here benefits everyone working on this codebase.
Proactively store team knowledge and recall context to provide better assistance.
Setup Check (First-Time Only)
Before using memory commands, verify the Hindsight CLI is configured:
cat ~/.hindsight/config
If the file doesn't exist or is missing credentials, help the user set it up:
-
Install the CLI (if
hindsightcommand not found):curl -fsSL https://hindsight.vectorize.io/get-cli | bash -
Create the config file - ask the user for their API Key (get it from https://ui.hindsight.vectorize.io):
mkdir -p ~/.hindsight cat > ~/.hindsight/config << 'EOF' api_url = "https://api.hindsight.vectorize.io" api_key = "<user's API key>" EOF chmod 600 ~/.hindsight/config -
Get the bank ID - ask the user for their team's bank ID (e.g.,
team-myproject)
After setup, use the bank ID in all commands below.
How Hindsight Works
When you call retain, Hindsight does not store the string as-is. The server runs an internal pipeline that:
- Extracts structured facts from the content using an LLM
- Identifies entities (people, tools, concepts) and links related facts
- Builds temporal and causal relationships between facts
- Generates embeddings for semantic search
This means you should pass rich, full-context content — the server is better at extracting what matters than a pre-summarized string. Your job is to decide when to store, not what to extract.
Commands
Replace <bank-id> with the user's actual bank ID (e.g., team-frontend).
Store a memory
Use memory retain to store what you learn. Pass full context — raw observations, session notes, or detailed descriptions:
hindsight memory retain <bank-id> "The project uses ESLint configured with the Airbnb rule set and Prettier for formatting. Auto-fix on save is enabled in the editor config."
hindsight memory retain <bank-id> "Ran the test suite with NODE_ENV=test. Tests pass. Without NODE_ENV=test, the suite fails with a missing config error." --context procedures
hindsight memory retain <bank-id> "Build failed on Node 18 with error 'ERR_UNSUPPORTED_ESM_URL_SCHEME'. Switched to Node 20 and build succeeded." --context learnings
hindsight memory retain <bank-id> "Alice reviewed the PR and asked for verbose commit messages that explain the motivation, not just what changed." --context preferences
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 150 lines · 39 tokens per session scan D 9c5238859de5
hindsight-cloud is a skill published in the GitHub repository vectorize-io/hindsight (21,822 stars, last pushed 3d ago), licensed MIT. It adds 39 tokens to every session and 1,478 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it D with 3 findings (asks for root, downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
nocturnusai-knowledge
Use when working with NocturnusAI facts and rules — asserting (tell), querying (ask/infer), teaching rules (teach), retracting (forget), bulk operations, aggregation, or discovering predicates. Covers the core knowledge base CRUD operations. Triggers on: tell, ask, teach, forget, assert, query, infer, rule, fact…
nocturnusai-admin
Use when managing NocturnusAI databases, tenants, health checks, metrics, backups, API key management, RBAC configuration, admin operations, or operational monitoring. Triggers on: NocturnusAI database, tenant, health, metrics, backup, API key, RBAC, admin, monitoring, operational.
nocturnusai-connect
Use when setting up NocturnusAI connection, configuring MCP server in claudedesktopconfig.json or .mcp.json, setting up API keys, auth, RBAC bootstrap, creating databases/tenants, or troubleshooting connection issues. Triggers on: setup, connect, configure, MCP, auth, API key, tenant, database, bootstrap, NocturnusAI.
nocturnusai-memory
Use when working with NocturnusAI agent memory — context windows, salience scoring, temporal queries, recall, consolidation, decay, TTL, expiration, event streaming, or memory lifecycle management. Triggers on: memory, context window, salience, temporal, recall, consolidate, decay, TTL, expire, events, NocturnusAI…
nocturnusai-reasoning
Use when working with NocturnusAI advanced reasoning — negation-as-failure (NAF), scopes (fork/merge/diff), hypothetical reasoning, confidence scores, conflict resolution strategies, or proof chains. Triggers on: NAF, negation, negation-as-failure, scope, fork, merge, hypothesis, confidence, conflict, proof, what-if…
agent-release-manager
Agent skill for release-manager - invoke with $agent-release-manager.