Security audit
Security checks for vulnerabilities and agentic risk
Memfy is a small memory-saving skill whose durable file writes are disclosed, purpose-aligned, and constrained to user-requested non-secret context.
Install this only if you want the agent to append durable notes to a local memory file when you ask it to remember things. Avoid asking it to save secrets or sensitive personal data, and review the chosen memory file periodically because entries persist across sessions.
The skill is designed to save durable memory, but the manifest does not provide a user-facing warning or confirmation mechanism before persistence occurs. Because stored memory may include sensitive personal details or inaccurate inferred facts, silent or low-visibility saving can lead to privacy harm, consent issues, and long-lived data retention problems.
The manifest enables implicit invocation and uses a broad default prompt to save durable details from conversation, which can overlap with ordinary user discussion about remembering things for later. This creates a real risk of unintended activation and memory capture without sufficiently explicit, contemporaneous user intent, especially because the skill handles persistence across sessions.
No suspicious patterns detected.
