skill-system-memory
Provides persistent shared memory for AI agents using PostgreSQL, ensuring efficient memory retrieval and management.
Install this skill
Security score
The skill-system-memory skill was audited on Feb 12, 2026 and we found 13 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Piping content to bash shell
| 193 | printf '%s' "Steps: ..." | bash "scripts/mem.sh" store semantic project "pgvector install" "postgres,pgvector,windows" 8 |
Access to hidden dotfiles in home directory
| 66 | - `~/.config/opencode/skill-system-memory/setup.json` |
Access to hidden dotfiles in home directory
| 81 | 1) Copy `plugins/skill-system-memory.js` to `~/.config/opencode/plugins/` |
Access to hidden dotfiles in home directory
| 86 | - Remove or rename `~/.config/opencode/plugins/skill-system-memory.js` |
Access to hidden dotfiles in home directory
| 89 | - macOS/Linux: `~/.local/share/opencode/log/` |
Access to hidden dotfiles in home directory
| 99 | - Remove `~/.config/opencode/plugins/skill-system-memory.js` |
Access to hidden dotfiles in home directory
| 109 | - Linux/macOS: `~/.pgpass` (must be `chmod 0600 ~/.pgpass` or libpq will ignore it) |
Access to hidden dotfiles in home directory
| 478 | 1) Copy `plugins/skill-system-memory.js` to `~/.config/opencode/plugins/` |
Access to hidden dotfiles in home directory
| 483 | - `~/.config/opencode/skill-system-memory/compaction-events.jsonl` |
Access to hidden dotfiles in home directory
| 502 | - OpenCode events: `~/.config/opencode/agent-memory-systems-postgres/compaction-events.jsonl` |
Access to hidden dotfiles in home directory
| 503 | - Output directory: `~/.config/opencode/agent-memory-systems-postgres/compaction-daily/` |
External URL reference
| 112 | - Docs: https://www.postgresql.org/docs/current/libpq-pgpass.html |
External URL reference
| 115 | - Docs: https://www.postgresql.org/docs/current/libpq-envars.html |