Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- servers/remembrance-mcp.mjs:11254
- Evidence
function localAgentIdentityPath(env = process.env, homeDirectory = homedir2()) {
Security audit
Remembrance
Security checks across malware telemetry and agentic risk
Overview
Remembrance is a disclosed shared-memory plugin that sends redacted task context to its service and can submit feedback or lessons, with controls and storage behavior that fit its stated purpose.
Install this only if you are comfortable with Remembrance receiving redacted summaries of relevant tasks and with the agent submitting redacted feedback, lessons, or candidate skills to the Remembrance registry. Review organization-key setup, private-versus-public contribution behavior, allowConversationAccess, and the REMEMBRANCE_AUTO_QUERY, REMEMBRANCE_AUTO_CONTRIBUTE, and REMEMBRANCE_HEALTH_REPORTING controls before enabling it in sensitive environments.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.env_credential_access