brain.md — security grade SAFE, quality 68/100

Security audit verdict: SAFE · quality 68/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by mindmuxai · Codex Skill · ★ 541

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is brain.md safe to install? View the security audit →

About brain.md

brain.md A persistent memory layer for your coding agents. An open, agent-agnostic standard for capturing a project's durable knowledge as plain Markdown — read and written through one small CLI. It lives in your repo and travels across agents, machines, and models. Why · Quick start · See it work · CLI · How it works This repository is the toolkit, not a brain itself. Install it once, then run inside any project: it scaffolds a protocol file and a directory into your repo. From then on, any coding agent — Claude Code, Codex, anything that reads files — learn

agent-memoryai-agentsclaude-codeclicodexcoding-agentscontext-engineeringdeveloper-toolsknowledge-managementllmwiki

Quick Facts

Stars541
Forks49
LanguageJavaScript
CategoryCodex Skill
LicenseApache-2.0
Quality Score67.8121626508309/100
Last Updated2026-09-11
Created2026-06-18
Platformsclaude-code, cli, codex, node
Est. Tokens~11k

Compatible Skills

These tools work well together with brain.md for enhanced workflows:

  • recall-loom — semantic(0.43)+complementary+rare_topics+similar_pop+shared_platform (59%)

brain.md alternative? Top 6 similar tools

Looking for a brain.md alternative? If you're comparing brain.md with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • recall-loom by Frappucc1no · ⭐ 154

    Project memory for long-running AI work across agents, models, and sessions. Keep context, decisions, progress

  • project-butler by JamesShi96 · ⭐ 372

    Project memory system for AI coding assistants (Claude Code, Cursor, Codex): session logs, project wiki, rules

  • aiwg by jmagly · ⭐ 222

    Reusable project context and specialist workflows for the AI tools you already use. Agents, skills, rules and

  • pilot-shell by maxritter · ⭐ 2.1k

    Professional context and harness engineering for Claude Code and OpenAI Codex. Build production-grade software

  • ai-devkit by codeaholicguy · ⭐ 1.6k

    The control plane for AI coding agents.

  • browser-debugger-cli by szymdzum · ⭐ 174

    Let Claude Code and other coding agents drive and debug Chrome from the shell. DOM, network, console and raw C

More Codex Skill Tools

Explore other popular codex skill tools:

View all Codex Skill tools →

Popular JavaScript Agent Tools

Frequently Asked Questions

What is brain.md?

brain.md is A persistent, file-based memory layer for coding agents — give Claude Code, Codex & others a project brain (durable decisions, requirements, constraints) via a zero-dependency CLI.. It is categorized as a Codex Skill with 541 GitHub stars.

What programming language is brain.md written in?

brain.md is primarily written in JavaScript. It covers topics such as agent-memory, ai-agents, claude-code.

How do I install or use brain.md?

You can find installation instructions and usage details in the brain.md GitHub repository at github.com/mindmuxai/brain.md. The project has 541 stars and 49 forks, indicating an active community.

What license does brain.md use?

brain.md is released under the Apache-2.0 license, making it free to use and modify according to the license terms.

What are the best alternatives to brain.md?

The top alternatives to brain.md on Agent Skills Hub include recall-loom, project-butler, aiwg. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Codex Skill tools