Security audit
M0
Security checks across malware telemetry and agentic risk
Overview
Review recommended: this is a real cloud memory plugin, but it automatically persists conversation data, stores API-key mappings, and exposes agent marketplace install/publish actions without clear boundaries.
Use this skill only if you intentionally want cloud-backed, automatic long-term memory. Before installing, confirm the base URL is a trusted service, understand where API keys and local cache files are stored, consider disabling auto-capture/auto-recall/local fallback where possible, and require manual review before any marketplace publish or install action.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.
