扫描报告
0 /100
simple-local-memory
Zero-dependency AI memory system. No API keys needed. Pure local storage with smart search.
A benign, zero-dependency local memory system for AI agents. All code is straightforward, no network access, no credential harvesting, and no obfuscation.
可以安装
No action needed. This skill is safe to use as described.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | WRITE | WRITE | ✓ 一致 | bin/*:1 shebang+require('fs') |
| 网络访问 | NONE | NONE | — | No network calls in any file |
| 命令执行 | NONE | NONE | — | No subprocess/spawn calls |
| 环境变量 | NONE | NONE | — | No process.env access |
| 技能调用 | NONE | NONE | — | No dynamic skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser APIs |
| 数据库 | NONE | NONE | — | No DB access, only local JSON files |
目录结构
11 文件 · 42.7 KB · 1686 行 JavaScript 8f · 880L
Markdown 2f · 768L
JSON 1f · 38L
├─
▾
bin
│ ├─
memory-export.js
JavaScript
│ ├─
memory-import.js
JavaScript
│ ├─
memory-init.js
JavaScript
│ ├─
memory-list.js
JavaScript
│ ├─
memory-search.js
JavaScript
│ ├─
memory-stats.js
JavaScript
│ └─
memory-store.js
JavaScript
├─
▾
lib
│ └─
memory-core.js
JavaScript
├─
package.json
JSON
├─
README.md
Markdown
└─
SKILL.md
Markdown
安全亮点
✓ Zero dependencies declared in package.json — no supply chain risk
✓ All I/O is confined to the working directory (memories/, SESSION-STATE.json, MEMORY.md)
✓ No network requests of any kind — fully air-gap capable
✓ No credential, token, or environment variable access
✓ No obfuscation (no base64, no eval, no atob)
✓ No subprocess, shell spawning, or remote script execution
✓ No sensitive file paths (~/.ssh, ~/.aws, .env) accessed
✓ No data exfiltration or C2 communication
✓ No persistence mechanisms (no cron, startup hooks, or backdoors)
✓ CLI bin entries are straightforward argument parsers with no hidden paths
✓ All functionality declared and consistent between SKILL.md and implementation