Claude Memory Pro
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is an instruction-only memory manager that is internally consistent with its stated purpose: it describes a local file-based 5-layer memory architecture and token-budget logic and does not request extra credentials, installs, or external endpoints.
This skill appears coherent and does what it says (a local, file-based memory and token-budget system). Before enabling it: (1) confirm where the memory/ directory will be created and whether the runtime isolates or restricts it; (2) avoid storing secrets or sensitive data in plain text files created by the skill, or require encryption/access controls; (3) verify retention and deletion policies (how long memories are kept and how to purge them); (4) confirm your agent platform won't autonomously transmit these memory files to external endpoints (SKILL.md contains no network calls, but the agent runtime could still send data); and (5) test in an isolated environment first. If you need help specifying encryption, access control, or retention rules for the memory directory, request those additions before installing.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.