Security checks across malware telemetry and agentic risk
Engram’s memory features are coherent, but it should be reviewed because it defaults to persistent capture/recall of user content and makes lasting local environment changes during setup.
Install only if you are comfortable with a local long-term memory store. Review and consider disabling autoCapture/autoRecall for sensitive work, avoid storing secrets or regulated data, inspect shell startup file changes after setup, keep Qdrant/FastEmbed bound to trusted local services, and prefer explicit memory deletion by ID rather than vague query-based deletion.
logger.info("Started existing Qdrant container")
else:
# Create new container
subprocess.run([
"docker", "run", "-d",
"--name", "engram-qdrant",
"-p", "6333:6333", "-p", "6334:6334",64/64 vendors flagged this skill as clean.