memory-collector

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
prompts/people.md

This fragment is a prompt-based personal-data extraction and memory specification, not an executable malicious payload. It creates a meaningful privacy risk by directing collection and storage of identifiers, relationship details, sentiment, exposure preferences, and quotes about people in conversations. No direct evidence of malware, exfiltration, command execution, or sabotage appears in the shown portion; downstream storage and access controls require review.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 9, 2026, 08:46 PM
Package URL
pkg:socket/skills-sh/thorinside%2Fskills%2Fmemory-collector%2F@efb63d3f34bbd4b158a436271835239d5c0383b896c50a91ef58483abdb7ab6b
Security Audit — socket — memory-collector