claude-praetorian

SUSPICIOUS: The skill’s stated memory functions are internally coherent, but the backing implementation is opaque and appears to rely on a third-party MCP/npm package without verified same-org provenance. Main risk is hidden data flow and persistence of sensitive context, not clear malicious behavior.