byterover-cli-memory-layer

SUSPICIOUS. The core capability is coherent with a memory-layer skill, and the main installer appears official rather than deceptive. Risk comes from mutable pipe-to-shell installation, local handling of multiple API keys, cloud sync of project context, and especially transitive package/connector installation features with unclear verification.