Install memex — cross-AI memory

• Analyzed: May 16, 2026, 6:21 PM
• Findings: 1
• Version: 1.3.1
• Hash: d7771bdae8122366e9f31e8eec7cf38e75cc0f63b8aca3255cbd3b86f9cb93cf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill acts as an installer for a local-first memory tool, employing high-risk patterns such as executing a remote bash script via 'curl | bash' (from memex.parallelclaw.ai), modifying shell startup files (~/.zshrc), and establishing persistence via a macOS LaunchAgent. It also requires access to sensitive directories containing AI chat histories and Telegram exports. While these actions are aligned with the stated purpose and the SKILL.md instructions emphasize obtaining user consent and showing commands, the broad system access and reliance on remote execution scripts represent a significant security risk.