Lethe
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, instructions, and requested runtime behavior are coherent with its stated purpose (a local persistent memory service for agents); nothing requested is disproportionate or unexplained.
This skill appears to do what it says: it runs a local HTTP service that holds agent memory in a local SQLite DB and provides a plugin to assemble context for agents. Before installing consider: (1) whether you'll run the prebuilt GHCR image or build from source — building from the included source is more auditable; (2) the Lethe service will receive and store all session content you send to it, so do not point the plugin at a remote/untrusted endpoint if the data is sensitive; (3) ensure the host volume (/data) where lethe.db is stored is access-controlled and backed up per your policy; (4) review the included plugin code if you plan to let the agent auto-send full context (to understand precisely what fields are transmitted); and (5) running any network-exposed service implies you should firewall or bind it to localhost unless you intentionally want remote access.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
No VirusTotal findings