thedotmack/claude-mem hook mcp server skill
session memory
Claude-Mem is a persistent memory system that automatically captures and compresses context across Claude Code sessions. It stores observations from tool usage, generates semantic summaries, and makes them available to future sessions so Claude can maintain continuity of knowledge about projects. The system includes a local worker service, SQLite database, vector search via Chroma, and MCP tools for querying your project history.
Install via npx to automatically preserve project context between Claude Code sessions Search your session history with natural language queries using the mem-search skill Configure progressive disclosure to control which context gets injected and reduce token usage Mark sensitive content with <private> tags to exclude it from storage View real-time memory stream and citations through the web viewer UI 7 CRITICAL✓ 11 HIGH✓ 56 MEDIUM 1 LOW 1 INFO
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 18 likely real (100%) 7 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 5 high-signal, 2 mostly false-positive (hidden by default)
CHK-125 11 findings 6 likely 5 false positive
45% FP CHK-081 6 findings 6 likely
0% FP CHK-129 3 findings 3 likely
0% FP CHK-008 2 findings 2 likely
0% FP CHK-089 1 finding 1 likely
0% FP ▼ Show 2 checkers that are mostly false positives (2 findings) 76 findings click to expand
CHK-089 --dangerously-skip-permissions in executable — all permission checks bypassed
scripts/translate-readme/index.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in src/npx-cli/commands/ide-detection.ts
src/npx-cli/commands/ide-detection.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/sync-marketplace.cjs
scripts/sync-marketplace.cjs
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in src/services/infrastructure/ProcessManager.ts
src/services/infrastructure/ProcessManager.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/discord-release-notify.js
scripts/discord-release-notify.js
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/smoke-clean-room.cjs
scripts/smoke-clean-room.cjs
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/build-worker-binary.js
scripts/build-worker-binary.js
AI: likely real confirmed ▼
CHK-008 PostToolUse governance hook captures broad tool output
plugin/hooks/codex-hooks.json
AI: likely real likely ▼
CHK-008 Stop governance hook captures broad tool output
plugin/hooks/codex-hooks.json
AI: likely real likely ▼
CHK-129 Sensitive field in return type/schema — token: str
src/shared/oauth-token.ts
AI: likely real likely ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in scripts/discord-release-notify.js
scripts/discord-release-notify.js
AI: likely real likely ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in install/setup-runtime.ts
src/npx-cli/install/setup-runtime.ts
AI: likely real likely ▼
CHK-129 Sensitive field in return type/schema — API_KEY: str
src/shared/SettingsDefaultsManager.ts
AI: likely real likely ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in commands/ide-detection.ts
src/npx-cli/commands/ide-detection.ts
AI: likely real likely ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in scripts/generate-changelog.js
scripts/generate-changelog.js
AI: likely real likely ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in scripts/smoke-clean-room.cjs
scripts/smoke-clean-room.cjs
AI: likely real likely ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in infrastructure/ProcessManager.ts
src/services/infrastructure/ProcessManager.ts
AI: likely real likely ▼
CHK-129 Sensitive field in return type/schema — token: str
src/supervisor/process-registry.ts
AI: likely real likely ▼
CHK-125b chmod — permission modification — no scope constraint in claude-mem/entrypoint.sh
docker/claude-mem/entrypoint.sh
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in hooks/codex-hooks.json
plugin/hooks/codex-hooks.json
possible ▼
CHK-125 child_process module — shell execution — no scope constraint in scripts/worker-wrapper.cjs
plugin/scripts/worker-wrapper.cjs
possible ▼
CHK-125 child_process module — shell execution — no scope constraint in scripts/context-generator.cjs
plugin/scripts/context-generator.cjs
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in scripts/version-check.js
plugin/scripts/version-check.js
possible ▼
CHK-125 shell=True in subprocess — shell injection risk — no scope constraint in scripts/bun-runner.js
plugin/scripts/bun-runner.js
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in oh-my-issues/SKILL.md
plugin/skills/oh-my-issues/SKILL.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in standup/standup.mjs
plugin/skills/standup/standup.mjs
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in translate-readme/index.ts
scripts/translate-readme/index.ts
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in bug-report/cli.ts
scripts/bug-report/cli.ts
possible ▼
CHK-125a fs.readFile — filesystem read access — no scope constraint in bug-report/collector.ts
scripts/bug-report/collector.ts
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in shared/spawn.ts
src/shared/spawn.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in shared/find-claude-executable.ts
src/shared/find-claude-executable.ts
possible ▼
CHK-073 Curl Pipe Bash Install detected in README.md [test context]
README.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in sdk/parser.ts
src/sdk/parser.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in supervisor/env-sanitizer.ts
src/supervisor/env-sanitizer.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in middleware/request-auth-helpers.ts
src/server/middleware/request-auth-helpers.ts
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in commands/install.ts
src/npx-cli/commands/install.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in transcripts/field-utils.ts
src/services/transcripts/field-utils.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in integrations/CursorHooksInstaller.ts
src/services/integrations/CursorHooksInstaller.ts
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in integrations/CodexCliInstaller.ts
src/services/integrations/CodexCliInstaller.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in sync/ChromaSync.ts
src/services/sync/ChromaSync.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in worker/ClaudeProvider.ts
src/services/worker/ClaudeProvider.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in worker/SessionMessageBuffer.ts
src/services/worker/SessionMessageBuffer.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in worker/model-aliases.ts
src/services/worker/model-aliases.ts
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in infrastructure/WorktreeAdoption.ts
src/services/infrastructure/WorktreeAdoption.ts
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in knowledge/CorpusStore.ts
src/services/worker/knowledge/CorpusStore.ts
possible ▼
CHK-027 Outbound network call in skill — external network call (verify direction — could be benign API fetch)
openclaw/SKILL.md
possible ▼
CHK-115 Credential file path referenced in skill content: .env`
plugin/skills/version-bump/SKILL.md
possible ▼
CHK-020 hooks field in plugin.json — 1 hooks cause duplicate execution in Claude Code v2.1+
.codex-plugin/plugin.json
possible ▼
CHK-020 hooks field in plugin.json — 1 hooks cause duplicate execution in Claude Code v2.1+
plugin/.codex-plugin/plugin.json
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in cli/claude-md-commands.ts
src/cli/claude-md-commands.ts
possible ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in src/npx-cli/install/setup-runtime.ts [build-script context]
src/npx-cli/install/setup-runtime.ts
possible ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/generate-changelog.js [build-script context]
scripts/generate-changelog.js
possible ▼
CHK-054 Tool 'search' — generic name without namespace prefix (shadow risk)
src/servers/mcp-server.ts
possible ▼
CHK-054 Tool 'search' — generic name without namespace prefix (shadow risk)
src/server/mcp/recall-mcp-server.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in Dockerfile.test-installer
Dockerfile.test-installer
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in .plan/worktree-adoption.md
.plan/worktree-adoption.md
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in openclaw/install.sh
openclaw/install.sh
possible ▼
CHK-125b chown — ownership change — no scope constraint in openclaw/Dockerfile.e2e
openclaw/Dockerfile.e2e
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in plans/2026-05-25-cmem-sdk-and-server-rename.md
plans/2026-05-25-cmem-sdk-and-server-rename.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in plans/02-spawn-contract-templating.md
plans/02-spawn-contract-templating.md
possible ▼
CHK-125 child_process module — shell execution — no scope constraint in plugin/.mcp.json
plugin/.mcp.json
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in scripts/smoke-clean-room.cjs
scripts/smoke-clean-room.cjs
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in scripts/strip-comments.ts
scripts/strip-comments.ts
possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in scripts/check-spawn-env-discipline.cjs
scripts/check-spawn-env-discipline.cjs
possible ▼
CHK-125 spawnSync() — synchronous process spawn — no scope constraint in scripts/pr-babysit-status.ts
scripts/pr-babysit-status.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in scripts/regenerate-claude-md.ts
scripts/regenerate-claude-md.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in scripts/build-worker-binary.js
scripts/build-worker-binary.js
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in scripts/gen-plugin-lockfile.cjs
scripts/gen-plugin-lockfile.cjs
possible ▼
CHK-125a open() with absolute path — unrestricted file access — no scope constraint in scripts/claude-mem-sync
scripts/claude-mem-sync
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in scripts/sync-marketplace.cjs
scripts/sync-marketplace.cjs
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in ragtime/ragtime.ts
ragtime/ragtime.ts
possible ▼
CHK-125b chown — ownership change — no scope constraint in claude-mem/Dockerfile
docker/claude-mem/Dockerfile
possible ▼
CHK-125b chmod — permission modification — no scope constraint in claude-mem/run.sh
docker/claude-mem/run.sh
possible ▼
CHK-125b chmod — permission modification — no scope constraint in claude-mem/README.md
docker/claude-mem/README.md
possible ▼
CHK-025 Hardcoded endpoint in skill: https://t.me/userinfobot
openclaw/SKILL.md
possible ▼
CHK-062 Hook output is trusted as user input by Claude Code (confirmed in system prompt)
cursor-hooks/hooks.json
possible ▼
▼ Show 7 false positives (8% of this view) Last scanned: Jul 12, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.