xmemo@1.1.51
VERIFIED· install onlyPublisher claims: "Persistent, user-owned memory for agents. Use the standalone runtime to remember, recall, search, preserve restart continuity, manage TODOs and expenses, inspect account overview, activity and stats diagnostics, read user Cloud Skills (read-only) and Dream-run digests (read-only), configure agent instructions, check for updates or upgrade runtime, or diagnose XMemo when MCP tools are unavailable. Not for codebase search, web search, or short-lived in-session notes." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 88/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
console.log(safeJson(output));Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.// Best effort chmodFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.… nothing else. Then wait for the command to exit. A short tool timeout must not kill it before approval or expiry. 3. When login succeeds: run `node scripts/xmemo-sk…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.… has been used ${state.recalls} times on this computer. If the current project's AGENTS.md or CLAUDE.md has no "## XMemo memory" section, you may offer once more to add it (see references/agent-profile.md) and record the answer with \`prof…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.May I add this section to AGENTS.md?Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…all projects on this computer rather than per project. ## 1.1.32 ### Added - Add evidence-based re-offer for the every-session AGENTS.md instruction setup: first-run sign-in offers (yes / later / don't ask again), re…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Agent: XMemo is connected. Want XMemo used automatically in every session of this project? I can add a short XMemo section to AGENTS.md.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.