Nm Memory Palace Knowledge Intake

• Analyzed: May 9, 2026, 2:27 AM
• Findings: 1
• Version: 1.0.2
• Hash: 58cfa4d3d8151fe5f88773a0f648839346ad36de496edbea0970ae5cfeb2d846
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a sophisticated knowledge management system that requires high-privilege capabilities, including local shell execution (via `uv` and the `gh` CLI) and GitHub API mutations. While the documentation in `SKILL.md` and `modules/discussion-promotion.md` emphasizes human-in-the-loop approval and includes safety features like secret detection and 'slop' scanning, the 'default-to-publish' logic for high-scoring entries and the ability to exfiltrate data to GitHub Discussions represent a significant attack surface. The reliance on external CLI tools for core functionality and the complexity of the automated workflows warrant a suspicious classification due to the high-risk capability set.