agent-memory-mcp

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub URL is an external, potentially unverified repository that could distribute executable code or malicious scripts, while the localhost URL is local and not a download source.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). This skill clones and runs code from the external repository https://github.com/webzler/agentMemory.git at runtime (git clone + npm ci/npm run ...), which fetches remote code that will be executed and relied upon to provide the agent's memory server.