memos-cloud-server
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities mostly match its memory purpose, and install/runtime paths are same-org and relatively standard. The main risk is disproportionate autonomous collection and persistence of user conversation data to an external cloud service on every turn without explicit per-action consent, plus broad profile retrieval and file upload capabilities.
Confidence: 88%Severity: 63%
Audit Metadata