Capability drift in willow-memory/willow-mcp

Detected 09-03 16:00 — an inferred review signal from capability captures, not a verdict.

github willow-memory/willow-mcp D

Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.

maintainer: willow-memory
tools: 157
CVEs: 0
releases: 170

advisory #863955

HIGH willow-memory/willow-mcp 09-03 16:00

code analysis flagged dynamic code execution in willow-memory/willow-mcp

current permission surface (inferred):

drift timeline for willow-memory/willow-mcp → security tab →

drift history for this server newest 8

HIGH 09-15 18:49 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 18:11 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 17:49 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 17:40 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 17:00 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 16:19 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 16:10 code analysis flagged dynamic code execution in willow-memory/willow-mcp
HIGH 09-15 04:58 code analysis flagged dynamic code execution in willow-memory/willow-mcp

Each entry is one capability capture differing from the one before it — a review signal, not a verdict.