reflexion
Facilitates cross-session learning by extracting insights and integrating them into persistent memory through guided dialogue.
Install this skill
or
70/100
Security score
The reflexion skill was audited on Mar 5, 2026 and we found 10 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 73
Access to hidden dotfiles in home directory
SourceSKILL.md
| 73 | ~/.claude/projects/-{encoded-project-path}/sessions/{session-id}.jsonl |
low line 75
Access to hidden dotfiles in home directory
SourceSKILL.md
| 75 | ~/.claude/sessions/{session-id}.jsonl |
medium line 77
Access to hidden dotfiles in home directory
SourceSKILL.md
| 77 | - Use Glob to find recent session: `~/.claude/**/sessions/*.jsonl` |
medium line 83
Access to hidden dotfiles in home directory
SourceSKILL.md
| 83 | - Session path is `~/.claude/sessions/` → **user-level mode** |
low line 94
Access to hidden dotfiles in home directory
SourceSKILL.md
| 94 | "userLevelPath": "~/.claude", |
medium line 186
Access to hidden dotfiles in home directory
SourceSKILL.md
| 186 | User-level mode (sessions under `~/.claude/sessions/`): |
low line 198
Access to hidden dotfiles in home directory
SourceSKILL.md
| 198 | ├── "User .insights/ ~/.claude/.insights/ (cross-project reference)" |
low line 202
Access to hidden dotfiles in home directory
SourceSKILL.md
| 202 | ├── "User .insights/ ~/.claude/.insights/ (cross-project reference)" |
medium line 213
Access to hidden dotfiles in home directory
SourceSKILL.md
| 213 | - Path: `~/.claude/projects/{encoded}/memory/MEMORY.md` |
medium line 214
Access to hidden dotfiles in home directory
SourceSKILL.md
| 214 | - **User-level mode**: Tier A unavailable — `~/.claude/memory/` does not exist; Q5 must show Tier B only |
Scanned on Mar 5, 2026
View Security Dashboard