Security audit

Nexus Memory

Security checks for vulnerabilities and agentic risk

Overview

This is mostly a memory plugin, but it also has under-disclosed automatic control over tool calls, outgoing messages, and Qdrant collection deletion that users should review before installing.

Review this before installing in a real workspace. Use a dedicated Qdrant collection, back it up, and confirm its vector dimensions before startup. Only enable autoCapture if you are comfortable storing conversation content and failed captures locally; only use remote embedding providers if tool parameters and conversation text are acceptable to send there. Be aware the plugin can block or alter tool calls and outgoing unattended messages, and there is no obvious config switch for the pre-tool gate.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:62
Evidence: if (process.env.VOYAGE_API_KEY) return "voyage";

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: lib/embedder.ts:25
Evidence: if (process.env.VOYAGE_API_KEY) return "voyage"