registry / memgrep / 1.2.0

memgrep@1.2.0

Telegram → Cursor agent + searchable local memory for playbooks you reuse (and schedule with memgrep jobs).

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package can explicitly install a package-owned macOS LaunchAgent that keeps an allowlisted Telegram-to-Cursor agent running. This is persistent remote agent capability, but not install-time or covert behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `memgrep telegram install` after configuring a Telegram profile.

Impact

An authorized Telegram sender can submit prompts to the configured local Cursor agent while the service is running.

Mechanism

LaunchAgent persistence for an allowlisted Telegram-controlled Cursor agent.

Rationale

Source inspection confirms an explicit, persistent remote coding-agent feature rather than covert malware. Because it creates a background LaunchAgent that brokers Telegram prompts to Cursor, flag it as a guarded lifecycle risk rather than block it.

Evidence

package.jsondist/cli/commands/telegram.jsdist/telegram/launchd.jsdist/telegram/bot.jsdist/telegram/api.jsdist/memory/mcp.js

Network endpoints1

api.telegram.org

Decision evidence

public snapshot

AI called this at 91.0% confidence with false-positive risk.

memgrep@1.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code