memory-collector

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
prompts/people.md

This fragment is a prompt-based personal-data extraction and memory specification, not an executable malicious payload. It creates a meaningful privacy risk by directing collection and storage of identifiers, relationship details, sentiment, exposure preferences, and quotes about people in conversations. No direct evidence of malware, exfiltration, command execution, or sabotage appears in the shown portion; downstream storage and access controls require review.

Confidence: 98%Severity: 55%
Audit Metadata
Analyzed At
Sep 9, 2026, 08:46 PM
Package URL
pkg:socket/skills-sh/thorinside%2Fskills%2Fmemory-collector%2F@efb63d3f34bbd4b158a436271835239d5c0383b896c50a91ef58483abdb7ab6b