Open-source, local-first memory and continuity layer for AI agents. Hybrid retrieval (FTS + vectors + entity graph), MCP-native, SQLite to start, Postgres to scale.
D high
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- C · 56 → D · 64
- A · 0 → C · 56
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
committed secret: Slack token, GitHub token · dynamic exec: marshal.loads(), pickle.loads(), eval()/exec()
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit c30530a · analyzer v33 · 1w ago
skills & prompt files 7
- skill samrusani-AliceMemory-c30530a/agent-skills/hermes/alice-memory/SKILL.md
- skill samrusani-AliceMemory-c30530a/agent-skills/openclaw/alice-project-memory/SKILL.md
- skill samrusani-AliceMemory-c30530a/docs/integrations/hermes-skill-pack/skills/alice-workflows/alice-continuity-recall/SKILL.md
- skill samrusani-AliceMemory-c30530a/docs/integrations/hermes-skill-pack/skills/alice-workflows/alice-correction-loop/SKILL.md
- skill samrusani-AliceMemory-c30530a/docs/integrations/hermes-skill-pack/skills/alice-workflows/alice-explain-provenance/SKILL.md
- skill samrusani-AliceMemory-c30530a/docs/integrations/hermes-skill-pack/skills/alice-workflows/alice-open-loop-review/SKILL.md
- skill samrusani-AliceMemory-c30530a/docs/integrations/hermes-skill-pack/skills/alice-workflows/alice-resumption/SKILL.md
danger signals17
- dynamic code execution marshal.loads() samrusani-AliceMemory-c30530a/apps/api/src/alicebot_api/onramp.py :1613
record = marshal.loads(bytes(payload)) - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_common_split.py :213
assert pickle.loads(pickle.dumps(function)) is function - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_continuity_split.py :265
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_execution_split.py :162
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_governance_split.py :247
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_integrations_split.py :154
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_knowledge_split.py :269
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_retrieval_split.py :244
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_runtime_split.py :164
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution pickle.loads() samrusani-AliceMemory-c30530a/tests/unit/test_contracts_tasks_split.py :247
assert pickle.loads(pickle.dumps(contract_class)) is contract_class - dynamic code execution eval()/exec() samrusani-AliceMemory-c30530a/tests/unit/test_legacy_store_governance_integrations_split.py :400
exec("from alicebot_api.store import *", namespace) - dynamic code execution eval()/exec() samrusani-AliceMemory-c30530a/tests/unit/test_legacy_store_providers_knowledge_split.py :314
exec("from alicebot_api.store import *", namespace) - dynamic code execution eval()/exec() samrusani-AliceMemory-c30530a/tests/unit/test_legacy_store_task_execution_split.py :445
exec("from alicebot_api.store import *", namespace) - suspicious endpoint 169.254.169.254 (cloud metadata) samrusani-AliceMemory-c30530a/tests/integration/test_provider_runtime_api.py :1926
"http://169.254.169.254/v1", - suspicious endpoint 169.254.169.254 (cloud metadata) samrusani-AliceMemory-c30530a/tests/unit/test_provider_security.py :49
"http://169.254.169.254/latest/meta-data", - committed secret Slack token samrusani-AliceMemory-c30530a/tests/unit/test_vnext_memory_commit.py :153
xoxb-9…(22 chars, redacted) - committed secret GitHub token samrusani-AliceMemory-c30530a/tests/unit/test_vnext_promotion_policy.py :857
ghp_01…(40 chars, redacted)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:samrusani/AliceMemory/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of samrusani.