product-os-memory

SUSPICIOUS. The visible capabilities mostly match a shared-memory workflow skill, but the MCP backend is opaque and the skill permits automated Linear actions without explicit per-action approval. No direct malware indicators, credential theft, or installer abuse are present in the provided text, yet the undisclosed data path and cross-project memory scope create medium security risk.