Security audit
@klsgg/agentbrain
Security checks across malware telemetry and agentic risk
Overview
AgentBrain is a coherent memory plugin, but it automatically stores and reuses broad conversation-derived personal and behavioral data with limited privacy controls.
Install only if you are comfortable with this plugin building a long-term local memory/profile of conversations and injecting that memory into future prompts. Use a dedicated brainDir, disable promptInjection or the plugin when privacy matters, avoid sharing secrets or credentials in sessions where it is enabled, and periodically review or delete its local SQLite data.
VirusTotal
59/59 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.