MnemoPay

• Analyzed: Apr 3, 2026, 3:12 AM
• Findings: 1
• Version: 1.1.0
• Hash: 5d12bbed86d52866583a137d355907a8be956d5716f30a6f7de823b41b70bf23
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill introduces high-risk capabilities by providing tools for financial transactions (`charge`, `settle`) and persistent memory management. It executes remote code via `npx -y @mnemopay/sdk` and includes specific instructions in `SKILL.md` for the agent to initiate charges and manage a wallet. While these features are consistent with the stated purpose, the combination of automated financial workflows and the use of an atypical GitHub repository source (`t49qnsx7qt-kpanks/mnemopay-sdk`) warrants a suspicious classification due to the potential for financial abuse or supply chain risk.