distill-memory
Fail
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The Distill Memory skill is conceptually coherent with its purpose of capturing high-value insights and persisting them via the nmem CLI. However, there are notable security and data-flow considerations: optional remote synchronization could leak memory content if not secured; credentials (apiKey) stored in config.json pose a risk if not properly protected; documentation lacks explicit data-scope and security controls for remote calls. Overall, the footprint is benign for a memory-management helper but warrants mitigations around credential handling, documented data flows, and secure transport for any remote API interactions.
Confidence: 98%
Audit Metadata