memory-add

The skill’s stated purpose matches its behavior, but it relies on load-time shell execution and an unseen local script to perform the write. That makes it higher risk than a pure documentation/helper skill, though there is no evidence here of credential theft, remote code fetch, or external data exfiltration.