Security audit
Honcho Memory
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Honcho cloud-memory integration, but its bundled workspace instructions authorize broad proactive access and external actions without clear consent boundaries.
Install only if you are comfortable with Honcho receiving and storing conversation memory and any legacy memory you choose to migrate. Before adopting the bundled workspace templates, edit the autonomy, heartbeat, calendar/email/social, deletion, and commit/push instructions so external services and remote changes require explicit opt-in and clear user control.
SkillSpector
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.