bm-status

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands (basic-memory --version, bm --version, and basic-memory hook status) to verify the installation and operational health of the plugin's CLI components.
  • [EXTERNAL_DOWNLOADS]: It utilizes uvx to execute the basic-memory package. uvx is a standard Python tool that fetches and runs packages from the Python Package Index (PyPI) in a temporary environment if they are not already installed locally.
  • [DATA_EXPOSURE]: The skill accesses configuration files (~/.claude/settings.json, .claude/settings.json, and .claude/settings.local.json) to extract and report the plugin's current settings (e.g., project IDs, folder paths, and redaction rules) to the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 09:44 PM
Security Audit — agent-trust-hub — bm-status