memos-memory-guide
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the memory-recall purpose is plausible, but the actual footprint extends into team data sharing and transitive skill installation. The main concerns are unclear publisher provenance, outbound sharing of conversation/task data, and the ability to pull/install additional skills that inherit agent permissions.
Confidence: 83%Severity: 74%
Audit Metadata