Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local memory co-occurrence tracker that stores association metadata in SQLite and does not show hidden execution, network access, credential use, or deceptive behavior.
Install only if you are comfortable with the skill keeping a local SQLite database of memory ID relationships under the configured path. Review or translate the Chinese documentation if needed, and set CO_OCCURRENCE_DB_PATH if you want the database stored somewhere specific.
The natural-language content of the skill description is effectively restricted to Chinese, which can constitute a language-policy issue when no user opt-in or alternative language option is provided. The file does not indicate that the skill is intentionally region-specific or that another language is available.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
表结构：
CREATE TABLE co_occurrence (
memory_a TEXT,
memory_b TEXT,
weight REAL,
This Python file contains user-facing natural-language documentation entirely in Chinese, including the module docstring and class/method descriptions, with no indication that language selection is optional. Per the policy, forcing a specific language or locale without user opt-in is a natural-language policy violation unless clearly justified as region-specific.
No suspicious patterns detected.