agent-memory

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The git clone URL points to a third-party GitHub repository (unknown/individual maintainer) that the instructions instruct you to pull and run startup scripts (high-risk distribution vector), while the localhost panel URL is just a local UI and not an external download source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The setup instructs cloning and running code from the external repository https://github.com/AnEntrypoint/agent-memory.git (git clone ...; ./start-all.sh), which fetches remote code and then executes it during installation, so it is a runtime external dependency that can execute code.