Engram is a self-hostable AI memory layer. It sits between an application and an LLM provider, retrieves relevant user memories from pgvector, injects them into chat prompts, forwards the request, and extracts new durable memories after the response returns.
- capability exposure inferred + 14
- recent drift inferred + 12
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1d ago · see ecosystem CVEs →
- B · 23 → C · 35
- C · 35 → B · 23
- C · 43 → C · 35
- C · 55 → C · 43
- C · 47 → C · 55
- C · 50 → C · 47
No known CVEs for this server.
- high dangerous code
committed secret: OpenAI key
- medium dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- medium dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- medium dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- medium dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- medium dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
analyzed commit 2aac450 · analyzer v33 · 1d ago
skills & prompt files 1
- agent-rules macayu17-Engram-2aac450/AGENTS.md
danger signals1
- committed secret OpenAI key macayu17-Engram-2aac450/api/test_provider_keys.py :175
sk-sup…(24 chars, redacted)
- recent drift +12 capability drift →
[](https://mcpobservatory.com/servers/github:macayu17/Engram/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of macayu17.