Amarin Memory
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, install, and runtime instructions line up with its stated purpose of a local, SQLite-based persistent memory for agents; nothing requested is disproportionate to that purpose.
This skill appears coherent with its stated goal: it installs a Python package and provides CLI scripts that store/search a local SQLite DB and call an embedding service. Before installing: (1) verify the 'amarin-memory' package source (PyPI or the GitHub repo linked) to reduce supply-chain risk; (2) be aware the skill will create ~/.amarin/agent.db and write your memories there; (3) if you set OLLAMA_URL to a remote endpoint, that endpoint will receive text for embeddings—don't point it at an untrusted service if you care about privacy; (4) review the package code (amarin-memory) if you need higher assurance. Otherwise the skill's requirements and behavior are proportionate to its purpose.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.