registry / mcp-agents-memory / 0.9.27
mcp-agents-memory@0.9.27
Long-term memory for AI agents with provenance tracking
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source does not support the scanner's remote payload execution or credential redirection claims. The flagged primitives serve package-aligned memory functionality, with no concrete malicious chain identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Running the CLI starts the memory server; migrations require the migrate command and Typesafe tagging requires an enable flag.
Impact
No downloaded payload execution, credential theft, or agent control-surface mutation was established.
Mechanism
Conversation logs feed the configured database, while dynamic evaluation generates local validators or computes a fixed constant.
AI rationale
Inspected source does not support the scanner's remote payload execution or credential redirection claims. The flagged primitives serve package-aligned memory functionality, with no concrete malicious chain identified.
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install hooks or runtime dependencies; prepare only runs true.
- The librarian migration adds database columns inside a transaction; its dynamic evaluation computes a fixed BigInt constant.
- The entrypoint's AJV dynamic evaluation compiles locally generated schema validators.
- The indicated Claude integration reads conversation logs and stores messages in the configured memory database; it does not modify agent configuration.
- Typesafe tagging requires JEV_ENABLED=true and authenticates to api.typesafe.ai using a Typesafe credential.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
34 flaggedbuild/migrations/023_librarian_gate.jsView file
9195patternName = private_key_rsa
severity = critical
line = 9195
Critical
Critical Secret
Package contains a critical-looking secret pattern.
build/migrations/023_librarian_gate.jsView on unpkg · L91959195patternName = private_key_rsa
severity = critical
line = 9195
Critical
Secret Pattern
RSA private key in build/migrations/023_librarian_gate.js
build/migrations/023_librarian_gate.jsView on unpkg · L919512898var { readFile } = __require("fs");
L12899: var { execFile, spawn } = __require("child_process");
L12900: var { isParsedKey, parseKey } = require_keyParser();
High
Child Process
Package source references child process execution.
build/migrations/023_librarian_gate.jsView on unpkg · L12898Findings
31 Critical3 High3 Medium5 Low
CriticalCritical Secretbuild/migrations/023_librarian_gate.js
CriticalRemote Asset Decode Executebuild/index.js
CriticalRemote Response Code Executionbuild/index.js
CriticalTrigger Reachable Dangerous Capabilitybuild/index.js
CriticalSecret Patternbuild/migrations/023_librarian_gate.js
CriticalSecret Patternbuild/migrations/025_project_tag_alias_suggestions.js
CriticalSecret Patternbuild/migrations/014_drop_legacy_facts_constraints.js
CriticalSecret Patternbuild/migrations/008_schema_realignment.js
CriticalSecret Patternbuild/migrations/015_agent_provenance.js
CriticalSecret Patternbuild/migrations/028_raw_message.js
Critical
Affected versions and remediation
This report applies to mcp-agents-memory@0.9.27.
See all versions of mcp-agents-memory for other recorded verdicts.
- Review the evidence and your use of mcp-agents-memory@0.9.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.