memory

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core recall/learn workflow is plausible, and its main infrastructure choices are generally consistent with a memory service, but the skill's actual footprint is broader than advertised. The undocumented git-based auto-install path weakens install trust, and the extensive Theory-of-Mind/persona features introduce disproportionate user profiling, background analysis, and optional third-party LLM data flow that do not cleanly belong in a simple 'query memory before scanning code' skill.

Confidence: 84%Severity: 66%
Audit Metadata
Analyzed At
Mar 17, 2026, 06:47 AM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fmemory%2F@52d204607b0e6d846f7245834d1d1e1f3a5c3b5e
Security Audit — socket — memory