Security audit
Security checks for vulnerabilities and agentic risk
This is a simple memory-helper skill whose persistent storage and retrieval behavior matches its stated purpose, with privacy and accidental-trigger caveats users should understand.
Install only if you want a local persistent memory helper. Avoid storing secrets, credentials, or sensitive personal data unless you understand where mempalace stores its memory and who can later list or export it; use the explicit commands for add, search, list, and export deliberately.
The activation phrases include very broad natural-language terms such as “记住” and “搜索记忆”, which are likely to appear in ordinary conversation and can unintentionally trigger the skill. In a memory tool, accidental activation is more dangerous than usual because it can cause unintended storage, retrieval, or exposure of persistent user data across sessions.
The skill exposes memory-writing and export capabilities but does not warn users that inputs may be persistently stored or later disclosed through listing/export. Because this skill is specifically designed for cross-session memory retention, omission of a privacy warning materially increases the risk of users entering sensitive data without informed consent.
No suspicious patterns detected.
