agent-memory-mcp

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub URL points to an external repository from an unknown author that the skill instructs you to clone and run (npm ci / npm run), which is high-risk because it can execute arbitrary code; the http://localhost:3333 address is a benign local dashboard endpoint.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill clones and runs code from the external repository https://github.com/webzler/agentMemory.git at runtime (git clone + npm ci/npm run ...), which fetches remote code that will be executed and relied upon to provide the agent's memory server.