memory-ops

SUSPICIOUS: The skill’s capabilities mostly match its stated memory-management purpose, and its install path uses the official npm/docs flow. The main concerns are reliance on a third-party CLI with imperfect publisher identity alignment and the ability to sync potentially sensitive codebase knowledge to remote backends via Bash-driven commands. No clear credential harvesting or malicious exfiltration endpoint is shown.