Security audit
Security checks across malware telemetry and agentic risk
This is a disclosed memory skill, but it broadly and silently stores user/project information and can send stored memory to configured remote services, so users should review it before installing.
Install only if you want an agent to maintain persistent cross-session memory. Review the memory database regularly, keep AGENT_BRAIN_SUPERMEMORY_SYNC=off unless you intentionally use cloud sync, avoid configuring remote embeddings to untrusted URLs, and do not use it in conversations containing sensitive personal, business, legal, medical, credential, or regulated data unless you have clear controls around storage and export.
},
method="POST",
)
with urllib.request.urlopen(request, timeout=timeout) as response:
if response.status >= 300 and debug:
print(f"SuperMemory sync warning: HTTP {response.status}", file=sys.stderr)
except urllib.error.HTTPError as exc:timeout = float(os.environ.get("AGENT_BRAIN_EMBEDDING_TIMEOUT", "6"))
req = urllib.request.Request(url, data=payload, headers=headers, method="POST")
try:
with urllib.request.urlopen(req, timeout=timeout) as resp:
body = json.loads(resp.read().decode("utf-8"))
if isinstance(body, dict) and isinstance(body.get("embedding"), list):
vec = body["embedding"]66/66 vendors flagged this skill as clean.
Detected: suspicious.dynamic_code_execution