Skills
skills/basicmachines-co/basic-memory/bm-setup/Gen Agent Trust Hub

bm-setup

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the user to install the basic-memory package using uv or pip to provide the necessary MCP server functionality.
  • [EXTERNAL_DOWNLOADS]: Fetches and installs canonical shared skills from the author's repository using the command npx skills add basicmachines-co/basic-memory/skills.
  • [COMMAND_EXECUTION]: Modifies project-level configuration files (.claude/settings.json or .claude/settings.local.json) to store project mapping and user-defined capture preferences.
  • [COMMAND_EXECUTION]: Inspects existing project notes and directory layouts using list_directory and read_note to learn or suggest placement conventions. This ingestion of existing data is used to generate the placementConventions setting, and while it creates a surface for processing untrusted content, it is restricted to the skill's intended configuration purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 02:33 PM
Security Audit — agent-trust-hub — bm-setup