Security checks across malware telemetry and agentic risk
The core memory engine matches its purpose, but the package includes under-disclosed benchmark/test behaviors that can start a Redis daemon, delete temporary directories, and persist agent memory data in plaintext.
Install only if you are comfortable with a local plaintext memory database. Avoid storing secrets or personal data unless the storage directory is protected, backed up, and has a retention plan. Do not run the benchmark scripts on a shared or important machine without reviewing them first, because they delete /tmp benchmark paths and one can start a Redis daemon.
result = subprocess.run(["redis-cli", "ping"], capture_output=True, text=True)
if result.returncode != 0 or result.stdout.strip() != "PONG":
print(" Redis not running. Starting...")
subprocess.run(["redis-server", "--daemonize", "yes"], capture_output=True)
time.sleep(1)
for val_size in VAL_SIZES:}
static MemoryCtx *hipool_new(void) {
system("rm -rf /tmp/bench_hipool");
MemoryCtx *c = (MemoryCtx*)calloc(1, sizeof(MemoryCtx));
memory_init(c, "/tmp/bench_hipool", 7);
return c;}
static MemoryCtx *hipool_new(void) {
system("rm -rf /tmp/bench_hipool");
MemoryCtx *c = (MemoryCtx*)calloc(1, sizeof(MemoryCtx));
memory_init(c, "/tmp/bench_hipool", 7);
return c;memory_flush(c);
memory_destroy(c);
free(c);
system("rm -rf /tmp/bench_hipool");
}
static void bench_hipool(int val_sz) {}
static void bench(int vs, const char *label) {
system("rm -rf /tmp/hb_small");
MemoryCtx ctx;
memory_init(&ctx, "/tmp/hb_small", 7);
uint64_t *s_set = (uint64_t*)calloc(N, 8);}
static void bench(int vs, const char *label) {
system("rm -rf /tmp/hb_small");
MemoryCtx ctx;
memory_init(&ctx, "/tmp/hb_small", 7);
uint64_t *s_set = (uint64_t*)calloc(N, 8);free(s_set); free(s_get);
memory_destroy(&ctx);
system("rm -rf /tmp/hb_small");
}
int main(void) {VirusTotal findings are pending for this skill version.