supermemory-add

SUSPICIOUS: the stated purpose is coherent, but the skill’s core action is to execute an unverified local script with Bash/Node permissions and no provenance, source link, or integrity checks. No direct credential theft or malicious data flow is shown, but the executable trust gap makes the skill high risk.