memory-hygiene

Fail

Audited by Socket on Feb 13, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Destructive bash command detected (rm -rf, chmod 777) This skill appears functionally consistent with its stated purpose (memory audit/cleanup), and contains no signs of obfuscated malware or network exfiltration. However it carries moderate operational risk: it instructs and automates destructive filesystem operations (rm -rf), encourages storing sensitive locations (credential locations), and adds cron jobs that perform wipes and re-seeding without documented safeguards. Treat as SUSPICIOUS/operationally risky rather than malicious — safe only if run by trusted operators with least-privilege permissions, confirmations for destructive steps, and a policy forbidding storage of actual secrets or credential tokens. LLM verification: This skill's stated purpose (audit/wipe/reseed a LanceDB-based agent memory) matches the actions it documents, but it includes high-impact destructive and data-handling operations with insufficient safety controls. The rm -rf wipe, automated monthly cron that deletes and re-ingests data, and an explicit encouragement to store account/credential locations are the primary risks: they can cause irreversible data loss or consolidate sensitive information into the vector DB, which may be exposed if a

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 13, 2026, 09:53 PM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Fmemory-hygiene%2F@2baf35093f77f491f4c1c66491220195388ec190