Memphis Cognitive

• Analyzed: May 11, 2026, 5:08 AM
• Findings: 1
• Version: 3.7.2
• Hash: 32b8b46818ef906decaf48712c1c823480cbc4993ddd797aecefc567bca3e9de
• Source: palm
• External report: View on VirusTotal

Findings (1)

This bundle is a 'meta-package' that contains no functional logic, instead instructing the AI agent to install an external CLI tool via a high-risk 'curl | bash' command from a third-party GitHub repository (elathoxu-crypto/memphis). The SKILL.md and README.md files promote features like 'Multi-Agent Sync' and 'Trade Protocol' which facilitate remote data transfer and synchronization, potentially enabling data exfiltration. The aggressive marketing of 'zero bugs' and the redirection to unverified external scripts (IOC: https://raw.githubusercontent.com/elathoxu-crypto/memphis/main/install.sh) are significant red flags.