Is Basic Memory MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highShell command built from a string (injection risk)
Public scan report
scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan575 source files scanned3/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 5 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (3)
- highShell command built from a string (injection risk)
exec.shell-concatbasic_memory-0.23.2/integrations/openclaw/commands/slash.ts: …}`) try { const output = execSync(`bash "${scriptPath}"`, { encoding: "ut… - mediumsubprocess with shell=True
exec.shell-truebasic_memory-0.23.2/src/basic_memory/file_utils.py: … into args list for safer execution (no shell=True) args = shlex.split(cmd) …
- mediumeval / new Function used
exec.evalbasic_memory-0.23.2/src/basic_memory/read_cache/redis.py: …, remaining_ttl_ms = await self._client.eval( _LOOKUP_SCRIPT, …
Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Basic Memory does
- IWEMarkdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA
- Agent Memory OsLocal-first memory engine for AI-agent teams: team/project ACL, recall, and federated sync.not reviewedGrowingA
Total Agent MemoryPersistent local memory for coding agents: temporal knowledge graph, procedural and episodic recallnot reviewedEstablishedA
