byterover-cli-memory-layer
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides installation instructions that pipe a remote shell script directly into
sh. This pattern is highly risky as it allows for the execution of arbitrary remote code without user inspection. - Evidence:
curl -fsSL https://byterover.dev/install.sh | shfound inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install a global NPM package (
byterover-cli) and a remote shell script frombyterover.dev, a domain that is not recognized as a trusted organization or well-known service. - Evidence:
npm install -g byterover-cliandcurl -fsSL https://byterover.dev/install.sh | shinSKILL.md. - [CREDENTIALS_UNSAFE]: While it suggests storing keys in environment variables, it explicitly documents that the CLI stores provider API keys in a local JSON file (
.brv/config.json) and provides examples of hardcoded environment variables, which could lead to accidental exposure if these files are committed or logs are captured. - Evidence: Description of
.brv/config.jsonstorage and export examples likeexport ANTHROPIC_API_KEY=sk-ant-...inSKILL.md.
Recommendations
- HIGH: Downloads and executes remote code from: https://byterover.dev/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata