Back to plugin

Security audit

Package

Security checks across malware telemetry and agentic risk

Overview

This memory plugin appears purpose-built, but it needs Review because it automatically downloads and runs an external native sidecar while handling full conversation history and API keys.

Install only if you are comfortable with a memory plugin saving and recalling your conversations, sending relevant chat history to Gemini/OpenRouter, and running a downloaded native sidecar from the publisher's GitHub release. Review the publisher/source and consider using a limited API key and excluding sensitive conversations.

VirusTotal

65/65 vendors flagged this plugin as clean.

View on VirusTotal

Static analysis

Detected: suspicious.prompt_injection_instructions

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
CHANGELOG.md:43
Evidence
- **Unified custom narrative prompt (`narrativeSystemPrompt: false`)**: setting `narrativeSystemPrompt` to the boolean `false` omits the system instruction enti...