Security checks across malware telemetry and agentic risk
This memory skill is mostly transparent about what it does, but it exposes powerful install, repair, service-start, source-patching, secret-handling, and background-memory behaviors that need careful review before use.
Install only if you are comfortable with a memory system that can read local memory files, send them to OpenAI, store long-lived facts, and optionally run background extraction. Avoid the web UI and gateway auto-repair/install buttons unless you trust the local environment; install SurrealDB manually, use a dedicated Python venv, change root/root credentials, keep SurrealDB bound to 127.0.0.1, audit memory files for secrets, and verify cron and auto-injection settings before enabling them.
def install_python_deps() -> dict:
"""Install Python dependencies."""
try:
result = subprocess.run(
[sys.executable, "-m", "pip", "install", "surrealdb", "openai", "pyyaml"],
capture_output=True,
text=True,DATA_DIR.mkdir(parents=True, exist_ok=True)
# Start in background
process = subprocess.Popen(
["surreal", "start", "--user", "root", "--pass", "root", f"file:{DB_FILE}"],
stdout=subprocess.PIPE,
stderr=subprocess.PIPE,if not schema_file.exists():
return {"success": False, "error": "schema.sql not found"}
result = subprocess.run(
[
"surreal", "import",
"--conn", "http://localhost:8000",if system == "darwin":
# macOS - try homebrew first
if shutil.which("brew"):
result = subprocess.run(
["brew", "install", "surrealdb/tap/surreal"],
capture_output=True,
text=True,timeout=300
)
else:
result = subprocess.run(
["sh", "-c", "curl -sSf https://install.surrealdb.com | sh"],
capture_output=True,
text=True,timeout=300
)
elif system == "linux":
result = subprocess.run(
["sh", "-c", "curl -sSf https://install.surrealdb.com | sh"],
capture_output=True,
text=True,65/65 vendors flagged this skill as clean.