Security audit

Moore Pyramid Memory System

Security checks for vulnerabilities and agentic risk

Overview

This memory skill is not malicious, but it asks the agent to automatically save and reload conversation-derived memory across sessions without clear user controls.

Install only if you intentionally want local cross-session memory. Before using it for sensitive work, confirm where the memory files live, how to review and delete them, whether automatic summary writing can be disabled, and whether the agent will ask before saving conversation details.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Vague Triggers

Medium

Confidence: 84% confidence
Finding: The trigger conditions for writing summaries are broad and subjective, especially 'topic switch' and '5 min silence', which can cause the skill to persist conversation content without a clear, deliberate user action. In a memory skill that already mandates cross-session storage, ambiguous activation increases the chance of collecting and retaining sensitive data unexpectedly.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill directs automatic writes of conversation summaries to persistent files but does not require informing the user that their content will be stored across sessions. This creates a privacy and data-governance risk because users may disclose sensitive information without realizing it will be retained and reloaded later.

Ssd 3

Medium

Confidence: 97% confidence
Finding: The skill requires persistent recording of conversations, preferences, self-reflection, and pending actions across sessions, which materially increases exposure of sensitive user data. Because this data is structured, retained, and later reloaded, compromise, accidental disclosure, or misuse can reveal behavioral history and personal preferences far beyond a single session.

Ssd 3

Medium

Confidence: 93% confidence
Finding: The design mandates automatic loading of prior session memory layers and todos on every startup, which broadens the blast radius of any sensitive data previously written. Even if the storage is local, automatic rehydration can surface old private context in new sessions unnecessarily and can cause confidential information to influence future outputs without fresh user consent.

Static analysis

No suspicious patterns detected.