Trusted — Risk Score 0/100
Last scan:1 day ago Rescan
0 /100
simple-local-memory
Zero-dependency AI memory system. No API keys needed. Pure local storage with smart search.
A benign, zero-dependency local memory system for AI agents. All code is straightforward, no network access, no credential harvesting, and no obfuscation.
Skill Namesimple-local-memory
Duration29.1s
Enginepi
Safe to install
No action needed. This skill is safe to use as described.
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned bin/*:1 shebang+require('fs')
Network NONE NONE No network calls in any file
Shell NONE NONE No subprocess/spawn calls
Environment NONE NONE No process.env access
Skill Invoke NONE NONE No dynamic skill invocation
Clipboard NONE NONE No clipboard access
Browser NONE NONE No browser APIs
Database NONE NONE No DB access, only local JSON files

File Tree

11 files · 42.7 KB · 1686 lines
JavaScript 8f · 880L Markdown 2f · 768L JSON 1f · 38L
├─ 📁 bin
│ ├─ 📜 memory-export.js JavaScript 45L · 998 B
│ ├─ 📜 memory-import.js JavaScript 44L · 962 B
│ ├─ 📜 memory-init.js JavaScript 81L · 2.1 KB
│ ├─ 📜 memory-list.js JavaScript 57L · 1.3 KB
│ ├─ 📜 memory-search.js JavaScript 73L · 2.0 KB
│ ├─ 📜 memory-stats.js JavaScript 96L · 3.2 KB
│ └─ 📜 memory-store.js JavaScript 67L · 2.0 KB
├─ 📁 lib
│ └─ 📜 memory-core.js JavaScript 417L · 10.6 KB
├─ 📋 package.json JSON 38L · 878 B
├─ 📝 README.md Markdown 364L · 8.4 KB
└─ 📝 SKILL.md Markdown 404L · 10.3 KB

Security Positives

✓ Zero dependencies declared in package.json — no supply chain risk
✓ All I/O is confined to the working directory (memories/, SESSION-STATE.json, MEMORY.md)
✓ No network requests of any kind — fully air-gap capable
✓ No credential, token, or environment variable access
✓ No obfuscation (no base64, no eval, no atob)
✓ No subprocess, shell spawning, or remote script execution
✓ No sensitive file paths (~/.ssh, ~/.aws, .env) accessed
✓ No data exfiltration or C2 communication
✓ No persistence mechanisms (no cron, startup hooks, or backdoors)
✓ CLI bin entries are straightforward argument parsers with no hidden paths
✓ All functionality declared and consistent between SKILL.md and implementation