Skills/PyPI/mseep-mcp-memory-service

mseep-mcp-memory-service@6.13.4

CAUTION· not started

Publisher claims: "Universal MCP memory service with semantic search, multi-client support, and autonomous consolidation for Claude Desktop, VS Code, and 13+ AI applications" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher mseep-support · publishing for 578 daysInstalls 25Last detonated 2d ago
What would fix thisWatchDispute verdict

Coverage

Not started: dependency install failed; the server itself was not observed.
Tested
the dependency install step · every file read, file written and host contacted by what ran
Not tested
server startup · the tool list · tool behavior

What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
CLOUDFLARE_API_TOKENMCP_API_KEYTOKENIZERS_PARALLELISMConfiguration, not credentials: BACKUP_PATH, BACKUPS_PATH, CHROMA_DB_PATH, CLAUDE_DESKTOP, CLOUDFLARE_ACCOUNT_ID, CLOUDFLARE_BASE_DELAY, CLOUDFLARE_D1_DATABASE_ID, CLOUDFLARE_EMBEDDING_MODEL, CLOUDFLARE_LARGE_CONTENT_THRESHOLD, CLOUDFLARE_MAX_RETRIES, CLOUDFLARE_R2_BUCKET, CLOUDFLARE_VECTORIZE_INDEX, CUDA_HOME, CUDA_LAUNCH_BLOCKING, CUDA_PATH, DB_PATH, DEBUG_MODE, DOCKER_CONTAINER, HF_HOME, HF_HUB_OFFLINE, HSA_OVERRIDE_GFX_VERSION, ITEM_PATH, LM_STUDIO, MCP_ASSOCIATION_MAX_PAIRS, MCP_ASSOCIATION_MAX_SIMILARITY, MCP_ASSOCIATION_MIN_SIMILARITY, MCP_ASSOCIATIONS_ENABLED, MCP_CLUSTERING_ALGORITHM, MCP_CLUSTERING_ENABLED, MCP_CLUSTERING_MIN_SIZE, MCP_COMPRESSION_ENABLED, MCP_COMPRESSION_MAX_LENGTH, MCP_COMPRESSION_PRESERVE_ORIGINALS, MCP_CONSOLIDATION_ENABLED, MCP_CORS_ORIGINS, MCP_DECAY_ENABLED, MCP_EMBEDDING_MODEL
Where it talks to
no vendor host named in the codeAlso memory.local, pytorch.org, claude.ai — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
server startup · the tool list · tool behavior

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names memory.local, pytorch.org, claude.ai as well as its own vendor. The guard injects CLOUDFLARE_API_TOKEN, MCP_API_KEY, TOKENIZERS_PARALLELISM only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- uvx mseep-mcp-memory-service

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-12 and scored it 73/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Privileged sudo command; Privileged sudo command; Privileged sudo command. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run

Static findings

HIGH
Privileged sudo commandscripts/deploy_dual_services.sh:12 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl stop mcp-http-dashboard 2>/dev/null || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/deploy_dual_services.sh:11 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl stop mcp-memory 2>/dev/null || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/fix_mdns.sh:10 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl stop mcp-memoryFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Destructive file system command detectedscripts/install_linux_service.py:201 · Destructive file system command detectedsudo rm -f /etc/systemd/system/{SERVICE_NAME}.serviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/deploy_dual_services.sh:16 · Privileged sudo command — agent may execute with elevated privilegessudo cp /tmp/fastmcp-server-with-mdns.service /etc/systemd/system/mcp-memory.serviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/fix_mdns.sh:20 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl start mcp-memoryFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/find_orphaned_files.py:198 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files(r'.*\.env.*', 'Environment file'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/fix_mdns.sh:17 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl daemon-reloadFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install_linux_service.py:47 · Privileged sudo command — agent may execute with elevated privilegessystemctl_cmd = "sudo systemctl"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/fix_mdns.sh:13 · Privileged sudo command — agent may execute with elevated privilegessudo cp mcp-memory.service /etc/systemd/system/Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install_linux_service.py:126 · Privileged sudo command — agent may execute with elevated privilegessudo = ""Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/fix_mdns.sh:14 · Privileged sudo command — agent may execute with elevated privilegessudo chmod 644 /etc/systemd/system/mcp-memory.serviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/deploy_dual_services.sh:20 · Privileged sudo command — agent may execute with elevated privilegessudo cp /tmp/mcp-http-dashboard.service /etc/systemd/system/mcp-http-dashboard.serviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/deploy_dual_services.sh:24 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl daemon-reloadFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/service_control.sh:9 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl start $SERVICE_NAMEFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install_macos_service.py:158 · Privileged sudo command — agent may execute with elevated privilegesprint("Please run with sudo or use --user for user-level installation")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_macos_service.py:210 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/update_service.sh:12 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl daemon-reloadFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_macos_service.py:218 · Python subprocess execution detectedsubprocess.run(['launchctl', 'unload', str(plist_file)], capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/update_service.sh:18 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo systemctl status mcp-memory"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/claude_commands_utils.py:58 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_macos_service.py:271 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_windows_service.py:108 · Python subprocess execution detectedself.process = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Destructive file system command detectedscripts/service_control.sh:53 · Destructive file system command detectedsudo rm -f /etc/systemd/system/$SERVICE_NAME.serviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_windows_service.py:277 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/check_server_health.py:250 · Python subprocess execution detectedserver_process = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_windows_service.py:135 · Python subprocess execution detectedself.process = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/install_linux_service.py:129 · Privileged sudo command — agent may execute with elevated privilegessudo = "sudo "Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_linux_service.py:282 · Python subprocess execution detectedresult = subprocess.run(cmd, capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_macos_service.py:220 · Python subprocess execution detectedsubprocess.run(['launchctl', 'load', '-w', str(plist_file)], capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_linux_service.py:267 · Python subprocess execution detectedsubprocess.run(['sudo', 'chmod', '644', str(service_file)], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/service_control.sh:15 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl stop $SERVICE_NAMEFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/service_control.sh:11 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl status $SERVICE_NAME --no-pagerFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/install_linux_service.py:133 · Privileged sudo command — agent may execute with elevated privilegessudo = ""Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/cleanup_organize.py:34 · Python subprocess execution detectedresult = subprocess.run(command, shell=True, capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/claude_commands_utils.py:449 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/service_utils.py:248 · Privileged sudo command — agent may execute with elevated privilegesprint(f" sudo {' '.join(sys.argv)}")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/update_service.sh:6 · Privileged sudo command — agent may execute with elevated privilegessudo cp mcp-memory.service /etc/systemd/system/Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_linux_service.py:277 · Python subprocess execution detectedsubprocess.run(['sudo', 'systemctl', 'daemon-reload'], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/service_control.sh:20 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl restart $SERVICE_NAMEFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_linux_service.py:266 · Python subprocess execution detectedsubprocess.run(['sudo', 'cp', tmp_path, str(service_file)], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/update_service.sh:17 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo systemctl start mcp-memory"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/service_control.sh:16 · Privileged sudo command — agent may execute with elevated privilegessudo systemctl status $SERVICE_NAME --no-pagerFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandscripts/fix_mdns.sh:14 · File permission modification command — agent changes file ownership/permissionssudo chmod 644 /etc/systemd/system/mcp-memory.serviceFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_macos_service.py:301 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Privileged sudo commandscripts/update_service.sh:9 · Privileged sudo command — agent may execute with elevated privilegessudo chmod 644 /etc/systemd/system/mcp-memory.serviceFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_linux_service.py:275 · Python subprocess execution detectedsubprocess.run(['systemctl', '--user', 'daemon-reload'], check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandscripts/setup_backup_cron.sh:17 · File permission modification command — agent changes file ownership/permissionschmod +x "$BACKUP_SCRIPT"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/setup-git-merge-drivers.sh:12 · File permission modification command — agent changes file ownership/permissionschmod +x scripts/uv-lock-merge.shFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/verify_environment.py:172 · Python subprocess execution detectedrocm_output = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_installation.py:303 · Python subprocess execution detectedmemory_cmd = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/run_http_server.py:47 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/utils/memory_wrapper_uv.py:47 · Python subprocess execution detectedresult = subprocess.run(cmd, check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/verify_environment.py:148 · Python subprocess execution detectednvcc_output = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/verify_environment.py:85 · Python subprocess execution detectedoutput = subprocess.check_output(['sysctl', '-n', 'hw.memsize']).decode('utf-8').strip()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/utils/uv_wrapper.py:105 · Python subprocess execution detectedresult = subprocess.run(cmd, check=False, stdin=sys.stdin, stdout=sys.stdout, stderr=sys.stderr)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandscripts/update_service.sh:9 · File permission modification command — agent changes file ownership/permissionssudo chmod 644 /etc/systemd/system/mcp-memory.serviceFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/testing/simple_test.py:16 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/run_http_server.py:66 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/utils/uv_wrapper.py:46 · Python subprocess execution detectedresult = subprocess.run([sys.executable, '-m', 'uv', '--version'],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/installation/install.py:168 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/run_complete_test.py:43 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/installation/install.py:111 · Python subprocess execution detectednvcc_output = subprocess.check_output([os.path.join(cuda_path, 'bin', 'nvcc'), '--version'],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/installation/install.py:127 · Python subprocess execution detectednvcc_output = subprocess.check_output([os.path.join(path, 'bin', 'nvcc'), '--version'],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_mdns.py:48 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/installation/install.py:152 · Python subprocess execution detectedrocm_output = subprocess.check_output(['rocminfo'],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/utils/uv_wrapper.py:108 · Python subprocess execution detectedresult = subprocess.run(cmd, check=False)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/run_http_server.py:118 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_mdns.py:83 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/service_utils.py:167 · Python subprocess execution detectedproc = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/verify_environment.py:131 · Python subprocess execution detectednvcc_output = subprocess.check_output(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/testing/simple_test.py:49 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/installation/install.py:70 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_windows_service.py:280 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_mdns.py:59 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_windows_service.py:285 · Python subprocess execution detectedresult = subprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/verify_pytorch_windows.py:89 · Python subprocess execution detectedgpu_output = subprocess.check_output(['powershell', '-Command', ps_cmd],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/verify_environment.py:188 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
LOW
URL to a private-network addressscripts/test_sse_events.py:30 · URL to a private-network address — a LAN or development targetBASE_URL = "http://10.0.1.30:8000"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedscripts/verify_pytorch_windows.py:117 · Python subprocess execution detectedgpu_output = subprocess.check_output(['powershell', '-Command', ps_cmd],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈81 tok
1 file · 81 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for mseep-mcp-memory-service@6.13.4 as of 2d ago. This is the package itself, not its dependencies.

What would make this Verified

7 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim mseep-support: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  3. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  5. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  6. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
Publish a new version to PyPI, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim mseep-supportPropose a patch to the maintainer