
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
markdown-memory
Advanced tools
Cross-platform Markdown-based memory/skill system for Claude Code & Antigravity IDE
A file-based memory and prompt bridge that connects claude.ai (where you think) ↔ Claude Code (where you build) ↔ Obsidian (shared long-term memory).
When you build with Claude, your work is split across two places: you sketch ideas and plan in claude.ai, then do the real work in Claude Code in your terminal. Those two sides don't share memory, and context evaporates between sessions, between chats, and whenever the context window compacts.
mm closes that gap. It's a set of Claude Agent Skills plus a small PowerShell installer that gives you:
Everything is markdown and files. No database, no cloud, no lock-in.
mm spans three environments that share state through files, not magic:
flowchart LR
A["claude.ai<br/>(ideas, planning)<br/>mm-web-bridge skill"]
B["Claude Code / PowerShell<br/>(real work)<br/>10 mm-* skills"]
C["Obsidian vault<br/>(shared memory)<br/>passport · handoff · sessions"]
A -- "self-contained prompt<br/>(copy-paste)" --> B
B -- "writes notes" --> C
C -- "passport + handoff<br/>loaded into Project Knowledge" --> A
C -- "read on resume" --> B
mm-web-bridge): it challenges your idea, checks fast-moving tech against the live web, and composes the prompt you'll run in Claude Code.mm-* skills that do the work and keep the vault up to date.# 0. (first time only) launch Claude Code once so ~/.claude/skills exists
# 1. Clone
git clone https://github.com/mworldorg/markdown-memory.git
cd markdown-memory
# 2. Register the skills (junctions into ~/.claude/skills + sets MM_REPO_ROOT)
# If PowerShell blocks the script, run instead:
# powershell -ExecutionPolicy Bypass -File scripts/register-skills.ps1
powershell scripts/register-skills.ps1
# 3. RESTART Claude Code (skills load at session start), then personalize:
/mm setup
# 4. Create your first project's passport (run inside the project folder):
/mm new
passport.md and handoff.md to Project Knowledge.mm-web-bridge skill into that Project (claude.ai → Customize → Skills → Upload a skill). After /mm setup, upload your personalized copy from claude-ai-skills/_generated/mm-web-bridge/ — the committed claude-ai-skills/mm-web-bridge/ is a template with placeholder persona."Read handoff.md and passport.md, tell me where we are and suggest the next step."
/mm resume → discuss in claude.ai → paste prompt into Claude Code → /mm save → /mm next
Ten skills on the Claude Code side, plus one on the claude.ai side — and vendored external skills (see Integrations).
| Skill | What it does |
|---|---|
mm | Dispatcher — short aliases for everything below |
mm setup | One-time personalization after cloning |
mm-init-project | Create a project passport + structure in the vault |
mm-resume | Load passport + dashboard + last session on start |
mm-projects | One-screen overview of all projects (read-only) |
mm-bridge | Wrap a task into a prompt framework for Claude Code |
mm-handoff | Generate the cross-chat handoff summary |
mm-save-session | Capture decisions and progress into the vault |
mm-instructions | Manage project instructions |
mm-doctor | Health checks, version sync, consistency with passport |
mm-web-bridge (claude.ai) | Idea partner + prompt composer in the browser |
ecc-security-review (vendored — ECC, MIT) | Security checklist: secrets, input validation, SQLi, auth, XSS/CSRF, rate limiting |
ecc-search-first (vendored — ECC, MIT) | Research before coding: search existing tools/libs/MCP/skills, then adopt / extend / build |
mm cooperates with several external tools and bodies of work. Where it builds on someone else's project, that project keeps its own license and attribution.
.planning/ / .gsd/) and cooperates with it; it never writes there. (deepest integration)mm-bridge. Inspired by awesome-claude-prompts, MIT.vendor/: ecc-security-review (markdown security checklist; renamed to avoid clashing with the built-in /security-review) and ecc-search-first (research-before-coding workflow). The rest of ECC (AgentShield, plugin, hooks, ~246 skills) is not included. MIT © Affaan Mustafa. (per-skill vendoring mechanism — see vendor/README.md)mm and context-mode solve different problems and don't overlap:
--resume by rebuilding your working state inside Claude Code.If you use both, context-mode already handles compaction; mm doesn't try to.
Karpathy guidelines and context-mode are external Claude Code plugins (not bundled in this repo). mm cooperates with them but works without them. To install:
# Karpathy coding guidelines (think-before-coding, simplicity, surgical, goal-driven)
/plugin marketplace add forrestchang/andrej-karpathy-skills
/plugin install andrej-karpathy-skills@karpathy-skills
# context-mode (in-session context optimization + continuity across compaction)
/plugin marketplace add mksglu/context-mode
/plugin install context-mode@context-mode
mm is cross-platform! It is fully supported on Windows, macOS, and Linux:
powershell scripts/register-skills.ps1 for PowerShell or python3 scripts/register-skills.py.python3 scripts/register-skills.py (which sets up symlinks in ~/.claude/skills and exports MM_REPO_ROOT in your shell profile like .zshrc or .bashrc).For the optional Telegram bridge:
powershell scripts/install-tg-bridge.ps1.python3 scripts/install-tg-bridge.py.mm-config.local.json written by /mm setup. The committed config stays a generic template.config.version. Per-skill version: fields are intentionally granular..planning/ / .gsd/.passport.md — the per-project source of truth (architecture, conventions, constraints)docs/ — deeper guides (Telegram bridge, config loading, etc.)Issues and PRs welcome. New skills go in skills/your-skill/SKILL.md with YAML frontmatter; claude.ai skills go in claude-ai-skills/ (they are not junctioned into Claude Code).
MIT — see LICENSE. Integrated projects retain their own licenses (see Integrations).
FAQs
Cross-platform Markdown-based memory/skill system for Claude Code & Antigravity IDE
The npm package markdown-memory receives a total of 0 weekly downloads. As such, markdown-memory popularity was classified as not popular.
We found that markdown-memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.