memory-pro

This package appears to implement a legitimate local semantic-search service, but it contains several red flags you should evaluate before installing or running it: 1) The manifest marks many environment variables as "required" (and calls them credentials) even though most are optional tuning flags — don't populate secrets blindly. 2) If you enable reranking (MEMORY_PRO_ENABLE_RERANK or set RERANK_PROVIDER/ENDPOINT/API_KEY), the service will send candidate sentences (your memory text) to the configured external endpoint — treat that as potential data exfiltration. 3) The code reads files across your workspace (memory markdowns and core files) and will write indexes and tmp files; review those paths and remove any bundled state before use. 4) Validation scripts try to restart a user systemd service (systemctl --user restart), which modifies system state — avoid running validation scripts that alter services unless you trust and inspected them. Recommended actions: run this in an isolated environment (container or throwaway VM), create a minimal .env that points to a test memory directory (not your real workspace), do not set rerank-related env vars or external endpoints unless you understand the data flows, and review/limit the configured MEMORY_PRO_DATA_DIR and core file list before building the index. If you need this skill but lack confidence, ask the publisher to: a) mark only truly required env vars as required, b) document rerank behavior clearly, and c) avoid requiring systemctl in validation scripts.