Security audit
Security checks for vulnerabilities and agentic risk
This is a local memory-management skill whose persistence behavior is visible and aligned with its stated purpose, though users should avoid storing sensitive information in it.
Install this only if you want the agent to keep local cross-session notes. Review the memory directory periodically, delete stale entries, and do not store secrets, credentials, private personal details, or sensitive project material unless you intentionally want them retained on disk.
The skill explicitly advertises cross-session memory for user and project information, but provides no user-facing notice about persistence, retention, or privacy implications. This can lead to unintentional storage of sensitive personal or project data across sessions, especially because the feature is framed as a core capability rather than an opt-in action.
The documented workflow instructs the agent to read, write, and index memory files without warning that these actions persist user-related data to local storage. Because the skill includes categories such as user preferences, background, project context, and external system references, silent persistence increases the risk of retaining sensitive information without informed consent.
No suspicious patterns detected.
