dreaming-consolidator
Analyzes auto-memory graphs to identify patterns across sessions and generates a digest without altering the original memory.
Install this skill
Security score
The dreaming-consolidator skill was audited on May 28, 2026 and we found 12 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 3 | description: Read the auto-memory graph (~/.claude/projects/*/memory/*.md), find cross-session patterns, and write a digest. The skill never mutates memory — output goes to a fresh file the user reads |
Access to hidden dotfiles in home directory
| 8 | Read-only consolidator across the auto-memory graph. The agent walks every memory file under `~/.claude/projects/*/memory/`, identifies cross-session patterns (recurring frictions, repeated user corre |
Access to hidden dotfiles in home directory
| 18 | - The cron-driven weekly digest — that's the `daily-brief-sdk` `dream-digest` workflow, which writes to `~/.claude/cook-and-brief/dream-digest/weekly-YYYY-MM-DD.html` and emails it. Don't duplicate th |
Access to hidden dotfiles in home directory
| 19 | - Confidential synthesis intended to feed back into auto-memory — this skill **never** writes into `~/.claude/projects/*/memory/` (that path is reserved for factual auto-memory; speculative synthesis |
Access to hidden dotfiles in home directory
| 25 | mkdir -p ~/.claude/cooking |
Access to hidden dotfiles in home directory
| 28 | printf '{"start_epoch": "%s"}' "$START_EPOCH" > ~/.claude/cooking/active-$PID |
Access to hidden dotfiles in home directory
| 31 | 3. The agent reads every `.md` file under `~/.claude/projects/*/memory/`, takes notes on patterns observed across files, and writes a digest naming at least 3 patterns. |
Access to hidden dotfiles in home directory
| 32 | 4. The output file path **must not** be under `~/.claude/projects/*/memory/`. A safe default is `~/Documents/dreaming-digests/<YYYY-MM-DD>.md` or wherever the user nominated. |
Access to hidden dotfiles in home directory
| 57 | rm -f ~/.claude/cooking/active-$PID ~/.claude/cooking/iter-$PID |
Access to hidden dotfiles in home directory
| 64 | - **Don't** write the digest into `~/.claude/projects/*/memory/`. Speculative synthesis must not poison factual auto-memory. |
Access to hidden dotfiles in home directory
| 71 | The output file exists at the nominated path and is **not** under `~/.claude/projects/*/memory/`. The mtime of every file under `~/.claude/projects/*/memory/` is unchanged after the run (run `stat` be |
Access to hidden dotfiles in home directory
| 75 | For a scheduled, emailed weekly digest, install the `daily-brief-sdk` `dream-digest` workflow. That workflow writes to `~/.claude/cook-and-brief/dream-digest/weekly-YYYY-MM-DD.html`, sends an email, a |