memmy-memory

SUSPICIOUS. The skill’s purpose is coherent for a memory CLI, but it relies on an external binary fetched at install time from a non-registry archive host without clear checksum/signature verification, and it forwards bearer tokens to arbitrary endpoints via --url/raw mode. That combination creates significant supply-chain and credential-routing risk even though the documented functionality matches the stated purpose.