registry / memgrep / 1.0.0

memgrep@1.0.0

Local agent memory and Cursor from your phone. Ingest chats across Cursor, Claude Code, and Kiro; recall via CLI or MCP; drive a real Cursor agent over Telegram — multi-profile, always-on on macOS.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `memgrep telegram` after configuration, or explicitly runs `memgrep telegram install`.

Impact

A configured Telegram account can remotely request actions from the local Cursor agent and, if explicitly installed, keep that capability running across login/reboot.

Mechanism

Allowed Telegram user messages drive a configured local Cursor agent; optional launchd persistence restarts the package CLI.

Rationale

No concrete malicious install-time behavior, covert exfiltration, or foreign AI-agent control-surface mutation was found. The package nevertheless provides explicit persistent remote Cursor-agent control, so it warrants a warning rather than a clean verdict.

Evidence

package.jsondist/cli/commands/telegram.jsdist/telegram/launchd.jsdist/telegram/config.jsdist/telegram/api.jsdist/telegram/cursor-agent.js~/Library/LaunchAgents/com.memgrep.telegram.plist~/.memgrep

Network endpoints1

api.telegram.org

memgrep@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code