mem-remember

SUSPICIOUS: the skill's behavior broadly matches its stated purpose, but it relies on runtime execution of an external npm CLI with no provenance evidence provided here and performs an unfiltered bulk context dump of team knowledge. The main risk is supply-chain trust plus overbroad data exposure, not confirmed malware.