P

piia-engram

patdolitse/piia-engram · v4.27.0 · Development & Workflow

by PatdolitseOwner verifiedScan grade: Good

Local-first personal AI identity and memory layer that shares user-owned preferences, lessons, decisions, playbooks, and project context across MCP-compatible coding tools

InstallSource
Follow0
Trust Score92Security scan89Components2
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is piia-engram a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • MCP
  • Cursor
  • 1 skill
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Not declared
License
AGPL-3.0-or-later

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence

What is piia-engram?

piia-engram is a published development & workflow plugin for AI coding agents that works with Claude Code, MCP and Cursor, developed by Patdolitse and distributed through the HOL AI plugin registry. Local-first personal AI identity and memory layer that shares user-owned preferences, lessons, decisions, playbooks, and project context across MCP-compatible coding tools.

Canonical slug
patdolitse/piia-engram
Version
v4.27.0 · updated Nov 2, 2026

Registry snapshot

Owner verification
Verified on HOL as @Patdolitse
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
92

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
89/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/Patdolitse/piia-engram
Source commit
2ab0cb645635…
Publisher verified
Yes
Owner verified
@Patdolitse
Agent Plugins 1.0
Not detected

Continuous scanner CI detected

No action is required. This plugin receives the full trust score.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
89
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
codex:hol-plugin-scanner-Fuwayf / cisco-skill-scanner: failedcodex:hol-plugin-scanner-Fuwayf / cisco-mcp-scanner: unavailable

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

20/20

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

20/20

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 2 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Find the marketplace and plugin names

    The install id is <plugin-entry>@<marketplace-name>, and the marketplace name is declared inside the manifest — it can differ from the repository name. List registered marketplaces to read both names.

    shell
  3. 3

    Install the plugin

    Substitute the plugin entry name and the marketplace name shown by the previous step.

    claude code

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "piia-engram",
  "version": "4.27.0",
  "description": "Local-first personal AI identity layer for MCP-compatible coding tools. Stores your lessons, decisions, playbooks, and project context as local JSON. AI proposes; high-risk items wait for your review, and everything stays visible and reversible. Local-first, no cloud, no account.",
  "author": {
    "name": "Engram Contributors",
    "url": "https://github.com/Patdolitse/piia-engram"
  },
  "homepage": "https://github.com/Patdolitse/piia-engram",
  "license": "AGPL-3.0-or-later",
  "keywords": [
    "memory",
    "identity",
    "cross-tool",
    "local-first",
    "mcp",
    "knowledge-management",
    "claude-code",
    "cursor",
    "codex"
  ],
  "repository": "https://github.com/Patdolitse/piia-engram",
  "interface": {
    "displayName": "piia-engram",
    "developerName": "Patdolitse"
  },
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/Patdolitse/piia-engram
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • engram

    skills/engram/SKILL.md

    Local-first personal AI identity and memory layer for MCP-compatible coding tools (Claude Code, Codex, Cursor, and others). Use this skill when the user wants to continue from a previous session ("continue from last session", "pick up where we left off"), recall a past decision ("what did we decide", "what was our reasoning"), persist something durable ("remember this", "save a lesson", "save a decision", "save a playbook"), search prior knowledge ("search what we know about X", "have we hit this before"), export their identity or context ("export my identity card", "give me my context"), or maintain local-first cross-tool identity and memory that the user owns and approves. Engram stores user-approved lessons, decisions, playbooks, and project context as local JSON; the AI suggests, the user decides what becomes permanent.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/plugin.json

file

726 bytes

23bc9774a181f0bb…

.codex-plugin/plugin.json

plugin-manifest

869 bytes

fdff3997bbcea844…

.cursor-plugin/plugin.json

file

922 bytes

14eaaf66816b0b4f…

.mcp.json

file

124 bytes

934e99692e28fb97…

.registry/mcp.json

mcp-config

114 bytes

3047b1187e40f43d…

LICENSE

file

46,032 bytes

75ed08c533ce9f4e…

pyproject.toml

file

3,730 bytes

c8754a18eaf70d68…

README.md

file

64,122 bytes

f794b0729d7b4d97…

requirements.lock

file

1,502 bytes

86adcc8e8d947b46…

SECURITY.md

file

5,507 bytes

2d59b0dbcf440adf…

skills/engram/references/privacy.md

skill

2,412 bytes

6488e2c1a0ab020f…

skills/engram/references/tools.md

skill

4,710 bytes

7de8639309b65e67…

skills/engram/SKILL.md

skill

5,287 bytes

ea7e861edc9fecec…

piia-engram — Frequently asked questions

What is piia-engram?
piia-engram is an AI plugin in the HOL registry. Local-first personal AI identity and memory layer that shares user-owned preferences, lessons, decisions, playbooks, and project context across MCP-compatible coding tools.
How do I install piia-engram?
Install piia-engram in your harness: Claude Code — /plugin marketplace add Patdolitse/piia-engram; Cursor — npx [email protected] add Patdolitse/piia-engram; MCP — git clone https://github.com/Patdolitse/piia-engram. Full step-by-step guidance is on the HOL plugin page.
How do I install piia-engram in Claude Code?
To install piia-engram in Claude Code, start with /plugin marketplace add Patdolitse/piia-engram. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How do I install piia-engram in Cursor?
To install piia-engram in Cursor, start with npx [email protected] add Patdolitse/piia-engram. The complete step-by-step install guide for Cursor is on the HOL plugin page.
How do I install piia-engram in MCP?
To install piia-engram in MCP, start with git clone https://github.com/Patdolitse/piia-engram. The complete step-by-step install guide for MCP is on the HOL plugin page.
How is the Trust Score for piia-engram computed?
piia-engram has a HOL Trust Score of 92 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/patdolitse%2Fpiia-engram/trust
Who publishes piia-engram?
piia-engram is published by Patdolitse and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-11-02 to 2026-11-03.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from piia-engram.

Alternatives in Development & Workflow

See all Development & Workflow plugins

Reviews and similar plugins