supermemory-status

SUSPICIOUS. The stated purpose is coherent, but the skill's core action is to run an unverifiable local script from the user's home directory and sometimes request escalated shell access to read credential state. There is no explicit exfiltration in the skill text, yet the trust model is weak enough that the overall risk is high even without confirmed malware.