unified-memory

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the ecc-universal package globally from the npm registry to enable the required CLI and MCP tools.
  • [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for memory management, including ecc memory search, ecc memory read, ecc memory save, and ecc memory doctor. It also details the use of environment variables like ECC_MEMORY_HARNESS for tool configuration.
  • [DATA_EXFILTRATION]: While the skill interacts with sensitive local paths like ~/.ecc/memory/, it does so to store and retrieve agent context. The instructions contain explicit warnings against storing credentials, tokens, or private keys within the vault.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 10:47 AM
Security Audit — agent-trust-hub — unified-memory