memstack-cli

SUSPICIOUS. The stated purpose is coherent for a memory skill, but the core dependency is an external CLI whose identity does not align with the apparent official vendor ecosystem. Because that CLI receives LLM API keys and sensitive memory content and can route data to arbitrary custom endpoints, the install trust and data-flow risks are disproportionate enough to classify the skill as suspicious rather than benign.