agent-memory-mcp

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Both GitHub URLs point to community repositories owned by unverified/unknown users (and one is used as a direct git clone target that the skill instructs you to run npm scripts from), which can deliver runnable code or installers and are therefore suspicious as potential malware distribution sources.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's setup explicitly instructs cloning and running remote code from the repository at https://github.com/webzler/agentMemory.git which fetches and then executes remote code (npm install / npm run start-server), so this URL is a runtime external dependency that can control execution.