Session Memory

• Analyzed: May 12, 2026, 3:38 AM
• Findings: 1
• Version: 2.0.0
• Hash: 16746ad689ef7df63c713a1387f965e4a3ef9073336e88b533cd647d733f5b3c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a functional local memory system but contains multiple security vulnerabilities due to a lack of input sanitization. Specifically, 'daily.sh' is vulnerable to path traversal via the date argument, and 'edit.sh' and 'recall.sh' are susceptible to shell/grep injection because user-provided variables are passed directly into shell commands. While the intent appears to be a legitimate utility for agent continuity, these flaws allow for unauthorized file access or command execution if the agent is prompted with crafted inputs.