Security audit

Supermemory

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate memory skill, but it can retain sensitive customer context with insufficient disclosure and user control.

Review this before installing if you handle customer, sales, or regulated data. Use a local-only configuration unless cloud storage is explicitly approved, avoid storing secrets, disable or gate auto-capture for sensitive conversations, and make sure retention and deletion behavior match your data policies.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill describes automatic capture and storage of sensitive customer interaction details such as preferences, price sensitivity, competitive mentions, and relationship context, but provides no notice, consent flow, or data-handling safeguards. In a memory system, this can lead to silent collection of personal or commercially sensitive information and later reuse in prompts or storage backends, creating privacy, compliance, and data minimization risks.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The integration section advertises a hosted cloud backend requiring an API key without warning that memories may leave the local environment and be transmitted to a third-party service. Because the stored content includes customer facts and conversation insights, users may unknowingly send sensitive business or personal data off-system, increasing confidentiality and regulatory exposure.

Missing User Warnings

Medium

Confidence: 86% confidence
Finding: The tool persists customer-related memories and insights as plaintext JSON files under a user-local directory without any notice, consent flow, or protection controls. In this context, the stored content is explicitly customer facts and conversation insights, so silent local storage increases the risk of unintended retention, privacy violations, and exposure to other local users, backups, or endpoint compromise.

Missing User Warnings

Medium

Confidence: 81% confidence
Finding: The forget command permanently deletes the targeted memory file immediately, with no confirmation, dry-run mode, or recovery mechanism. While deletion is scoped to the memory directory and requires an ID, accidental invocation or scripting mistakes can cause irreversible loss of customer or operational data.

Static analysis

No suspicious patterns detected.