Is bluepointdigital/vector-memory safe?
Yes. bluepointdigital/vector-memory is safe to install. Oathe's behavioral security audit gave the vector-memory skill by bluepointdigital a trust score of 87/100 with 3 findings, none critical or high.
https://clawhub.ai/bluepointdigital/vector-memory
Is bluepointdigital/vector-memory safe to install?
This appears to be a legitimate vector memory enhancement skill that provides semantic search capabilities for AI agent memory. While it contains executable code and downloads ML models, the functionality matches the stated purpose with no evidence of malicious behavior.
What security issues were found in bluepointdigital/vector-memory?
Category Scores
Findings (3)
MEDIUM Executable JavaScript code with system command execution -20 ▶
The skill contains Node.js code that uses execSync to execute system commands. While this appears to be for legitimate memory operations, it represents a potential attack vector if input validation is insufficient.
LOW External ML model download -10 ▶
The skill downloads an ~80MB machine learning model (all-MiniLM-L6-v2) from external sources. This is legitimate functionality for vector embeddings but represents external network access.
LOW Install script execution -5 ▶
The skill includes an install.sh script that performs system operations including file copying, npm install, and initial sync. The operations appear legitimate but represent code execution during installation.
Should I install bluepointdigital/vector-memory?
Oathe's verdict for bluepointdigital/vector-memory is SAFE with a trust score of 87/100. Recommendation: Install.