Skip to main content

claude-reflection

Enables continuous learning for Claude by capturing user interactions, corrections, and preferences for improved performance.

Install this skill

or
75/100

Security score

The claude-reflection skill was audited on Feb 19, 2026 and we found 17 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 43

Access to hidden dotfiles in home directory

SourceSKILL.md
43cat ~/.claude/memory/learnings.yaml
low line 276

Access to hidden dotfiles in home directory

SourceSKILL.md
276"global": "~/.claude/memory/global_learnings.yaml",
low line 277

Access to hidden dotfiles in home directory

SourceSKILL.md
277"domain": f"~/.claude/memory/domains/{domain}/learnings.yaml",
low line 291

Access to hidden dotfiles in home directory

SourceSKILL.md
291| GLOBAL (~/.claude/memory/global_learnings.yaml) |
low line 296

Access to hidden dotfiles in home directory

SourceSKILL.md
296| | DOMAIN (~/.claude/memory/domains/<domain>/) | |
medium line 317

Access to hidden dotfiles in home directory

SourceSKILL.md
317| Global | `~/.claude/memory/` | Permanent | "Always use descriptive variable names" |
medium line 318

Access to hidden dotfiles in home directory

SourceSKILL.md
318| Domain | `~/.claude/memory/domains/<name>/` | Permanent | "JavaScript: use camelCase" |
low line 325

Access to hidden dotfiles in home directory

SourceSKILL.md
325~/.claude/
low line 621

Access to hidden dotfiles in home directory

SourceSKILL.md
621# ~/.claude/memory/global_learnings.yaml
low line 1060

Access to hidden dotfiles in home directory

SourceSKILL.md
1060cat ~/.claude/memory/global_learnings.yaml | grep "validated: false"
low line 1084

Access to hidden dotfiles in home directory

SourceSKILL.md
1084cat ~/.claude/memory/global_learnings.yaml
low line 1087

Access to hidden dotfiles in home directory

SourceSKILL.md
1087grep -A5 "rule: 'your expected rule'" ~/.claude/memory/global_learnings.yaml
low line 1126

Access to hidden dotfiles in home directory

SourceSKILL.md
1126python -c "import yaml; yaml.safe_load(open('~/.claude/memory/global_learnings.yaml'))"
low line 1132

Access to hidden dotfiles in home directory

SourceSKILL.md
1132cp ~/.claude/memory/global_learnings.yaml ~/.claude/memory/global_learnings.yaml.bak
low line 857

External URL reference

SourceSKILL.md
857$schema: "https://workspace-hub.dev/schemas/learnings-v1.yaml"
low line 896

External URL reference

SourceSKILL.md
896$schema: "https://workspace-hub.dev/schemas/preferences-v1.yaml"
low line 928

External URL reference

SourceSKILL.md
928$schema: "https://workspace-hub.dev/schemas/patterns-v1.yaml"
Scanned on Feb 19, 2026
View Security Dashboard
Installation guide →