supermemory
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx supermemoryto perform memory operations. This is the intended behavior of the skill and uses a standard Node.js package executor. - [EXTERNAL_DOWNLOADS]: The skill uses
npx supermemory, which downloads the latest version of thesupermemorypackage from the npm registry if not already present. This is a standard and expected behavior for Node.js-based CLIs. - [DATA_EXFILTRATION]: While the skill transmits user data (memories, conversations) to an external API (
api.supermemory.ai), this is the primary and documented function of the skill. The transmission is secured via an API key provided by the user in a safe environment variables configuration.
Audit Metadata