memory-source-notes

SUSPICIOUS. The skill’s stated purpose and filesystem access are internally coherent for a local memory-transport tool, and there is no obvious credential harvesting or third-party exfiltration. However, it relies on an undocumented, unverifiable `memory-note` executable discovered from arbitrary local paths; that black-box dependency creates a mandatory high supply-chain risk floor for this skill.