memory-view
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to read and visualize local memory files located in "~/.claude/projects/". It performs no unauthorized data access or network operations.
- [SAFE]: Features a comprehensive redaction module ("scripts/lib/redact.ts") that uses entropy-gated regex patterns to identify and mask sensitive credentials (API keys, tokens, private keys) before they are rendered in the HTML report.
- [SAFE]: All content rendered into the HTML explorer is properly escaped using an internal "esc" utility in "tokens.ts", mitigating risks of cross-site scripting (XSS) when viewing reports in a browser.
- [SAFE]: Subprocess calls for resolving git roots and opening the system browser use safe execution patterns with argument arrays, preventing command injection vulnerabilities.
- [SAFE]: The tool has zero production dependencies, minimizing supply chain risks and ensuring a small, verifiable attack surface.
Audit Metadata