Memphis Cognitive

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent documentation/wrapper skill for an external memory CLI, with disclosed but noteworthy risks around remote installation, persistent memory, and optional sharing.

Before installing, verify the external Memphis CLI installer/repository, understand that Memphis creates a persistent local memory store, and use sync or trade features only for information you are comfortable sharing with trusted machines or agents.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

Running the installer gives external code the ability to modify the local environment during setup.

Why it was flagged

The recommended setup runs an external, unpinned GitHub-hosted shell script. This is user-directed and central to installing the separate CLI, but users should verify the source before executing it.

Skill content

curl -fsSL https://raw.githubusercontent.com/elathoxu-crypto/memphis/main/install.sh | bash

Recommendation

Review the install script or use a pinned release/package where possible before running curl-to-bash commands.

Medium

#ASI06: Memory and Context Poisoning

What this means

Decisions, notes, and inferred project context may persist across future agent sessions and influence later answers.

Why it was flagged

The skill documents a persistent local data store for Memphis memory chains and configuration, which is expected for a memory system but may retain sensitive user or project context.

Skill content

~/.memphis/                   # Data
 │   ├── chains/
 │   └── config.yaml

Recommendation

Store only information you are comfortable retaining, periodically review or prune the memory store, and be cautious about treating recalled memory as always accurate.

Medium

#ASI07: Insecure Inter-Agent Communication

What this means

Local memory content could be shared with another host or agent if sync or trade commands are used.

Why it was flagged

The documented multi-agent sync feature can push local memory blocks to a remote Memphis instance. This is disclosed and purpose-aligned, but it creates a data-sharing boundary users should understand.

Skill content

memphis share-sync --push --remote 10.0.0.80 --user memphis

Recommendation

Use sync/trade only with trusted recipients and remotes, and confirm which blocks or chains will be shared before pushing or accepting data.