Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- servers/remembrance-mcp.mjs:11254
- Evidence
function localAgentIdentityPath(env = process.env, homeDirectory = homedir2()) {
Security audit
Remembrance
Security checks for vulnerabilities and agentic risk
Overview
Remembrance is a disclosed shared-memory plugin that sends redacted task context to its service and can submit feedback or lessons, with controls and storage behavior that fit its stated purpose.
Install this only if you are comfortable with Remembrance receiving redacted summaries of relevant tasks and with the agent submitting redacted feedback, lessons, or candidate skills to the Remembrance registry. Review organization-key setup, private-versus-public contribution behavior, allowConversationAccess, and the REMEMBRANCE_AUTO_QUERY, REMEMBRANCE_AUTO_CONTRIBUTE, and REMEMBRANCE_HEALTH_REPORTING controls before enabling it in sensitive environments.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.env_credential_access