registry / mcp-agents-memory / 0.9.18
mcp-agents-memory@0.9.18
Long-term memory for AI agents with provenance tracking
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source shows package-aligned memory processing and database migrations, with no install-time attack chain or foreign agent configuration writes. The flagged location reads transcripts, and optional service authentication uses the credential's intended destination.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the memory server activates transcript capture; explicit migration commands apply database changes.
Impact
The inspected behavior stores and processes agent conversation memory; no covert exfiltration or agent control-surface mutation was established.
Mechanism
Project transcripts are read and stored in the configured database; optional classification sends message content to its authenticated service.
AI rationale
Inspected source shows package-aligned memory processing and database migrations, with no install-time attack chain or foreign agent configuration writes. The flagged location reads transcripts, and optional service authentication uses the credential's intended destination.
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install hooks or runtime dependencies; prepare is a no-op.
- The flagged Claude projects location supports transcript capture, without agent configuration mutation.
- Transcript capture starts with the memory server and stores parsed messages in the configured database.
- The required migration adds librarian bookkeeping columns using database transactions.
- Optional Typesafe classification requires explicit enablement and authenticates requests to its fixed service endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
31 flaggedbuild/migrations/023_librarian_gate.jsView file
9195patternName = private_key_rsa
severity = critical
line = 9195
Critical
Critical Secret
Package contains a critical-looking secret pattern.
build/migrations/023_librarian_gate.jsView on unpkg · L91959195patternName = private_key_rsa
severity = critical
line = 9195
Critical
Secret Pattern
RSA private key in build/migrations/023_librarian_gate.js
build/migrations/023_librarian_gate.jsView on unpkg · L919512898var { readFile } = __require("fs");
L12899: var { execFile, spawn } = __require("child_process");
L12900: var { isParsedKey, parseKey } = require_keyParser();
High
Child Process
Package source references child process execution.
build/migrations/023_librarian_gate.jsView on unpkg · L12898Findings
28 Critical3 High3 Medium5 Low
CriticalCritical Secretbuild/migrations/023_librarian_gate.js
CriticalRemote Asset Decode Executebuild/index.js
CriticalRemote Response Code Executionbuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
CriticalSecret Patternbuild/migrations/023_librarian_gate.js
CriticalSecret Patternbuild/migrations/025_project_tag_alias_suggestions.js
CriticalSecret Patternbuild/migrations/014_drop_legacy_facts_constraints.js
CriticalSecret Patternbuild/migrations/008_schema_realignment.js
CriticalSecret Patternbuild/migrations/015_agent_provenance.js
CriticalSecret Patternbuild/migrations/028_raw_message.js
Critical
Affected versions and remediation
This report applies to mcp-agents-memory@0.9.18.
See all versions of mcp-agents-memory for other recorded verdicts.
- Review the evidence and your use of mcp-agents-memory@0.9.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.