migrating-memory

Fail

Audited by Socket on Feb 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Instruction to copy/paste content into terminal detected This Skill documentation is coherent with its stated purpose and contains no signs of obfuscated or malicious code. The primary risk is operational: the instructions permit copying arbitrary memory files/blocks and syncing them to the service, which can lead to accidental data disclosure or deletion if the user copies sensitive files or misuses override/delete options. Recommend confirming ownership/permissions of source agent, reviewing files being copied before syncing, and backing up target agent memory before destructive operations. LLM verification: The document is a useful, coherent guide for memfs-first migration of agent memory. It does not contain code-level malware or obfuscation. Primary security concerns are operational: potential leakage of secrets or PII during export/copy, destructive overwrite or deletion of existing memory via override/delete options, and a missing explicit note about strict authorization checks when exporting another agent's memfs. Treat this functionality as sensitive and restrict usage to authorized users wit

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 16, 2026, 09:13 PM
Package URL
pkg:socket/skills-sh/letta-ai%2Fletta-code%2Fmigrating-memory%2F@285f1260f91e2116a4a3a14b2dc9514348b9823b