Open-source memory and context for user-aware agents: scoped memory, provenance, retrieval quality, correction, boundaries, evals, and MCP/HTTP access.
# Add to your Claude Code skills
git clone https://github.com/joshuaswarren/remnicLast scanned: 7/5/2026
{
"issues": [
{
"file": "README.md",
"line": 945,
"type": "secret-exfiltration",
"message": "Instruction appears to send credentials/secrets to an external endpoint",
"severity": "medium"
}
],
"status": "PASSED",
"scannedAt": "2026-07-05T07:25:45.844Z",
"npmAuditRan": false,
"pipAuditRan": true,
"promptInjectionRan": true
}remnic is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by joshuaswarren. Open-source memory and context for user-aware agents: scoped memory, provenance, retrieval quality, correction, boundaries, evals, and MCP/HTTP access. It has 169 GitHub stars.
Yes. remnic passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/joshuaswarren/remnic" and add it to your Claude Code skills directory (see the Installation section above).
remnic is primarily written in TypeScript. It is open-source under joshuaswarren on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh remnic against similar tools.
No comments yet. Be the first to share your thoughts!
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Open-source, local-first memory and context for AI agents. One memory store, every agent.
Website: remnic.ai - guide library, comparisons, benchmarks, and changelog.
cat, grep, edit, and version-control your memory with the tools you already use.Explain what helps once. Share only what you choose. Stop sharing at any time.
What Helps Me is a private support passport built on Remnic. It turns selected memories into short first-person cards. The owner reviews every word before a helper can see it.
No OpenAI API key is required. Manual cards need no model. Draft and question calls use the owner's existing Remnic route, including an OpenClaw gateway or a local model.
Watch the narrated 102-second product story or read the full Build for Good entry. The walkthrough always shows a Synthetic replay banner. It is not live-call proof. The separate live runner exercises the real standalone server and model flow. Its receipt validator checks internal consistency, not independent proof.
The framing comes from NHS England's health and care passport guidance. The NHS guidance says the person owns the passport, chooses its contents, and chooses who sees it. What Helps Me applies those rules to a broader self-advocacy tool. It is not a medical record, care plan, IEP, diagnosis tool, or emergency guide.
What Helps Me is for people who often need to explain how others can support them. It also helps trusted helpers act on clear, current guidance without seeing the person's full memory store.
The model is the scribe. The person is the author.
Codex traced Remnic's existing memory, model, HTTP, MCP, and browser contracts. It then built the feature as a seven-layer PR stack. Codex also wrote adversarial tests, checked WCAG states at four widths, and built the privacy-safe live run record. The owner approval and revocation rules remain deterministic core code. A model cannot bypass them.
Run the no-key synthetic walkthrough in about five minutes:
git clone https://github.com/joshuaswarren/remnic.git
cd remnic
pnpm install --frozen-lockfile
pnpm exec playwright install chromium
npm run demo:support-passport:replay
Open the printed loopback URL. The replay uses synthetic data and labels itself on every screen.
Run the standalone live flow with a local, direct, or compatible model route:
npm run demo:support-passport:live -- \
--config ./remnic.config.json \
--output ./tmp/support-passport-demo
npm run demo:support-passport:validate-receipt -- \
--receipt ./tmp/support-passport-demo/receipt.json
The validator checks the self-reported receipt schema and hash consistency. It does not convert that receipt into independent attestation.
For an existing OpenClaw install, keep the current gateway providers and model
auth. Enable the feature, owner HTTP bridge, and gateway route in
openclaw.json:
{
"plugins": {
"entries": {
"openclaw-remnic": {
"config": {
"modelSource": "gateway",
"openaiApiKey": false,
"supportPassport": { "enabled": true },
"agentAccessHttp": {
"enabled": true,
"host": "127.0.0.1",
"port": 4318,
"authToken": "${OPENCLAW_REMNIC_ACCESS_TOKEN}",
"principal": "passport-owner"
}
}
}
}
}
}
Set OPENCLAW_REMNIC_ACCESS_TOKEN to a private local bearer token. This token
protects the browser bridge. It is not a model provider key. Open
/remnic/ui/what-helps-me/ on the configured Remnic HTTP origin. Remnic uses
the OpenClaw gateway model chain and its existing provider auth.
The standalone live runner does not boot an OpenClaw host. Use the real browser
flow above to exercise an existing OpenClaw gateway setup. No OpenAI API key is
required. Manual cards and sharing need no model. Draft and question requests
return 503 provider_unavailable when no model route is configured.
Correct once. Every agent learns.
Remnic is shared memory for AI agents. Remnic Relay is the human-governed correction loop we built for OpenAI Build Week: it exposes the stale belief behind an agent failure, shows where that belief came from, puts the proposed replacement behind human approval, and proves a brand-new agent learned the approved correction from Remnic.
The demonstration follows an online-payment failure. One Codex agent reads the current rule while another confidently applies an older retry rule. Relay opens an evidence X-Ray connecting the recalled memory to the failing test, presents a before-and-after memory diff for approval, preserves the old belief as superseded, and then starts a fresh agent with no handoff. The mission is only complete when that agent recalls the replacement and turns the same payment test green.
Codex collaborated across the new extension: contract modeling, correction engine, Mission Control, isolated runner, adversarial tests, evidence sealing, and judge packaging. GPT-5.6 also powers the demonstrated product workflow itself through four isolated Codex roles: Scout reads the accepted rule, a Builder acts on stale memory, a correction agent proposes the replacement, and a fresh Builder proves the approved memory propagated without an agent handoff. Agents propose; a human approves; the test proves the result.
The fastest judge path uses the committed synthetic mission and requires no dependency install, model call, account, or credential:
git clone https://github.com/joshuaswarren/remnic.git
cd remnic
node scripts/relay/judge-package.mjs serve
Open the printed loopback URL, compare the current and stale beliefs, open the X-Ray, review and approve the proposed correction, and follow the fresh agent through the passing payment test. Verify the same evidence from the terminal:
node scripts/relay/judge-package.mjs verify
node scripts/verify-relay-judge-package.mjs
Remnic's core memory engine, integrations, and benchmark fra