Skip to main content

reflexion

Facilitates cross-session learning by extracting insights and integrating them into persistent memory through guided dialogue.

Install this skill

or
70/100

Security score

The reflexion skill was audited on Mar 5, 2026 and we found 10 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

low line 73

Access to hidden dotfiles in home directory

SourceSKILL.md
73~/.claude/projects/-{encoded-project-path}/sessions/{session-id}.jsonl
low line 75

Access to hidden dotfiles in home directory

SourceSKILL.md
75~/.claude/sessions/{session-id}.jsonl
medium line 77

Access to hidden dotfiles in home directory

SourceSKILL.md
77- Use Glob to find recent session: `~/.claude/**/sessions/*.jsonl`
medium line 83

Access to hidden dotfiles in home directory

SourceSKILL.md
83- Session path is `~/.claude/sessions/` → **user-level mode**
low line 94

Access to hidden dotfiles in home directory

SourceSKILL.md
94"userLevelPath": "~/.claude",
medium line 186

Access to hidden dotfiles in home directory

SourceSKILL.md
186User-level mode (sessions under `~/.claude/sessions/`):
low line 198

Access to hidden dotfiles in home directory

SourceSKILL.md
198├── "User .insights/ ~/.claude/.insights/ (cross-project reference)"
low line 202

Access to hidden dotfiles in home directory

SourceSKILL.md
202├── "User .insights/ ~/.claude/.insights/ (cross-project reference)"
medium line 213

Access to hidden dotfiles in home directory

SourceSKILL.md
213- Path: `~/.claude/projects/{encoded}/memory/MEMORY.md`
medium line 214

Access to hidden dotfiles in home directory

SourceSKILL.md
214- **User-level mode**: Tier A unavailable — `~/.claude/memory/` does not exist; Q5 must show Tier B only
Scanned on Mar 5, 2026
View Security Dashboard