by jzjzzzzzzz
Distill your knowledge, memories, and decisions into an open-source, inspectable AI Agent Twin.
# Add to your Claude Code skills
git clone https://github.com/jzjzzzzzzz/agent-meLast scanned: 9/4/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-09-04T08:43:41.294Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how agent-me compares with popular alternatives.
agent-me is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by jzjzzzzzzz. Distill your knowledge, memories, and decisions into an open-source, inspectable AI Agent Twin. It has 634 GitHub stars.
Yes. agent-me passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/jzjzzzzzzz/agent-me" and add it to your Claude Code skills directory (see the Installation section above).
agent-me is primarily written in Python. It is open-source under jzjzzzzzzz on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh agent-me against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
Feed it your knowledge, memories, projects, preferences, experiences, and decisions. Agent-Me turns them into an AI Agent Twin that keeps learning how you think and work.
It is not just a chatbot that knows facts about you. It is an open-source, inspectable architecture for building a second digital version of you—one that can retrieve, reason, verify, and eventually act with your context.
An AI agent that is learning to become me.
Quick start · Roadmap · Architecture · Learn · Contribute
English · 简体中文 · All languages

A conventional chatbot starts over with a prompt and returns an answer:
user → prompt → model → answer
Agent-Me treats a personal AI as a system:
your knowledge
↓
reviewable memory → retrieval → planning → evidence → critique → verification → response
The aim is not merely to answer questions about a person. It is to build an increasingly useful AI representation of:
Today, the repository provides a runnable FastAPI + React implementation over reviewable Markdown knowledge, with deterministic retrieval and sequential agent roles. The public repository uses fictional examples; each owner keeps their real identity and memory in a separate private workspace.
Many personal chatbots are effectively a prompt, a vector database, and a chat interface. They can recall biographical facts or imitate a writing style, but that is not the same as reliably representing a person.
Remembering facts about a person is easy. Building a system that can reliably represent that person is much harder.
The deeper question behind Agent-Me is: what would it take for an AI to actually represent a person? Such a system needs more than recall. It needs durable identity and memory models, provenance, temporal updates, uncertainty, reasoning, verification, and user control.
Agent-Me does not claim to solve all of those problems today. It provides a concrete, testable architecture for exploring them without hiding the process behind a single model response.
The current memory substrate is version-controlled Markdown: small, explicit, and inspectable. It gives the twin a stable body of personal knowledge instead of treating every conversation as isolated. An optional private workspace adds SQLite-backed typed memory, reviewed identity/relationships, declared valid and event times, revision history, persisted chat transcripts, and owner-confirmed learning. A browser review workbench makes approved-source ingestion, conflict review, provenance and local evidence-grounded answers accessible without the CLI. Optional scoped model-assisted extraction proposes pending classifications over exact source quotations; unconstrained semantic inference remains future work. Its workbench/API and explicit-file CLI require separately reviewed disclosure scope and per-attempt consent.
Retrieved personal knowledge remains connected to exact source excerpts. The system can refuse synthesis when it has insufficient evidence rather than filling gaps with confident invention.
Planner, Researcher, Critic, Writer, and optional Verifier roles have separate responsibilities and communicate through typed Python contracts. The goal is not to maximize the number of agents; it is to make important decisions explicit and testable.
Agent-Me exposes a public execution trace: role outcomes, safe intermediate summaries, evidence, metrics, retrieval activity, and verification results. It does not expose or claim to expose a model's private chain-of-thought.
Before an answer is returned, implemented checks can validate citation paths, evidence policy, and output invariants. Versioned cases then test supported, unsupported, adversarial, and boundary requests deterministically.
Most AI assistants show you only:
prompt → answerAgent-Me exposes the system in between:
memory → retrieval → planning → evidence → critique → verification → answer
Because if an AI is going to represent you, you should be able to inspect why it speaks for you.
| Part | Role in the AI Twin | Current implementation |
|---|---|---|
| Personal knowledge | Represents what the twin knows | Reviewable, version-controlled Markdown |
| RAG | Finds relevant personal evidence before answering | Bounded deterministic local retriever |
| Planner | Decides how to approach a question | Typed plan artifact |
| Researcher | Collects evidence for the plan | Exact source excerpts and metadata |
| Critic | Challenges unsupported synthesis | Evidence-sufficiency gate |
| Writer | Produces the grounded response | Citation-aware answer artifact |
| Verifier | Prevents invalid output from passing | Optional citation-path and metadata checks |
| Public trace | Makes execution inspectable | Safe stage summaries, outcomes, and metrics |
| Evaluation | Measures behavior beyond a demo | Versioned fixtures and deterministic runner |
The opt-in personal Agent additionally implements evidence-linked relationships, structured memory, typed know/recommend/act routing and three owner-approved local task/note tools. The action workbench exposes their default-off permissions, independently reviewed plans/approval/execution, local outputs and exact-effect undo. Arbitrary external tool integrations and unconstrained semantic inference remain future work; see the implementation ledger and private workspace guide.
Agent-Me treats an AI Twin as a system, not a prompt.
flowchart LR
Browser[React UI] -->|typed request| API[FastAPI request guard]
API --> Chat[Single-path Q&A]
API --> Flow[Sequential role orchestrator]
Chat --> Search[Deterministic retrieval]
Flow --> P[Planner]
P -->|Plan| R[Researcher]
R --> Search
Search --> Docs[(Reviewable personal knowledge)]
R -->|EvidenceBundle| C[Critic]
C -->|Critique| W[Writer]
W -. verified policy .-> V[Verifier]
W --> Result[Answer + sources + public trace]
V --> Result
Chat -. optional provider mode .-> Provider[OpenAI-compatible provider]
Cases[(Versioned cases)] --> Eval[Deterministic evaluator]
Eval --> CI[GitHub Actions]
The baseline policy executes Planner → Researcher → Critic → Writer. The verified policy adds Verifier as a fifth stage. Frozen dataclasses define the Plan, EvidenceBundle, Critique, WrittenAnswer, and Verification handoffs. Both policies run sequentially in one process against the same bounded retriever.
[!NOTE] The Verifier checks citation paths and other implemented output invariants. It does not prove factual truth or semantic entailment. See Trust, Data Flow, and Deployment Boundaries for the complete system boundary.
Read System Architecture for request paths and contracts, and API Reference for endpoint schemas.
Run the five-stage verified workflow:
curl http://localhost:8000/api/v1/collaborate \
-H 'Content-Type: application/json' \
-d '{"question":"How does the example agent plan a project?","workflow":"verified"}'
| Field | What it lets you inspect |
|---|---|
workflow |
Selected four- or five-stage policy |
sources |
Exact excerpts available to the roles |
grounded |
Whether the implemented evidence policy passed |
trace |
Role, outcome, safe summary, and metrics for each stage |
run_id |
Server-generated execution identity |
When evidence is missing, the Critic blocks synthesis and the Writer returns a fixed insufficient-evidence response. In verified mode, invalid citation paths or citation-count metadata are blocked as well.
The checked-in fixtures cover supported, unsupported, adversarial, and boundary requests. Results are deterministic for the same code, corpus, workflow, and input.
make test
make evaluate
make evaluate-semantic # Validate authored semantic benchmark labels; no model call/score
.venv/bin/python scripts/evaluate_collaboration.py --workflow verified --json
The default evaluator reports COLLABORATION_EVAL 4/4 passed. CI also runs backend tests, frontend lint/typecheck/tests/build, documentation validation, both workflow policies, and container smoke tests. See Lesson 06 and the evaluation fixtures.
Requirement: Docker with the Compose plugin.