Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 8, 2026, 9:19 AM

High risk

Checked commit: de8069428a92
Evidence Score: 82/100
Static risk: High risk
Files scanned: 12
Findings: 12

Evidence breakdown

Source provenance22/25

Install documentation25/25

Maintenance18/20

Compatibility evidence14/20

Security signals3/10

Compatibility confidence: Limited

Install-time scripts (4)

apps/memos-local-plugin/package.json#prepacknpm run check:hermes-version && npm run build:package
apps/memos-local-plugin/package.json#postinstallnode scripts/postinstall.cjs
apps/memos-local-openclaw/package.json#postinstallnode scripts/postinstall.cjs
apps/openwork-memos-integration/apps/desktop/package.json#postinstallelectron-rebuild && npm --prefix skills/dev-browser install && npm --prefix skills/file-permission install && npm --prefix skills/ask-user-question install

Findings (12)

Highinstall.script
apps/memos-local-openclaw/package.jsoninstall-time
```
"postinstall": "node scripts/postinstall.cjs"
```
Highinstall.script
apps/memos-local-plugin/package.jsoninstall-time
```
"postinstall": "node scripts/postinstall.cjs"
```

Highinstall.script

apps/memos-local-plugin/package.jsoninstall-time

"prepack": "npm run check:hermes-version && npm run build:package"

Highinstall.script

apps/openwork-memos-integration/apps/desktop/package.jsoninstall-time

"postinstall": "electron-rebuild && npm --prefix skills/dev-browser install && npm --prefix skills/file-permission install && npm --prefix skills/ask-user-question install"

Highshell.rm-rf
apps/openwork-memos-integration/apps/desktop/package.json:10dangerous-shell
```
"dev": "node scripts/patch-electron-name.cjs && rm -rf dist-electron && vite",
```
Highshell.rm-rf
apps/openwork-memos-integration/apps/desktop/package.json:22dangerous-shell
```
"clean": "rm -rf dist dist-electron release",
```
Highshell.rm-rf
apps/openwork-memos-integration/package.json:18dangerous-shell
```
"clean": "pnpm -r clean && rm -rf node_modules"
```
Highshell.rm-rf
apps/openwork-memos-integration/packages/shared/package.json:13dangerous-shell
```
"clean": "rm -rf dist"
```
Mediumobfuscation.child-process
apps/memos-local-openclaw/scripts/postinstall.cjs:4obfuscation
```
const { spawnSync } = require("child_process");
```
Mediumobfuscation.child-process
apps/memos-local-openclaw/scripts/postinstall.cjs:161obfuscation
```
const result = spawnSync(npmCmd, ["install", "--omit=dev"], {
```
Mediumobfuscation.child-process
apps/memos-local-openclaw/scripts/postinstall.cjs:428obfuscation
```
const result = spawnSync(npmCmd, ["rebuild", "better-sqlite3"], {
```

Mediumshell.sudo

apps/memos-local-openclaw/scripts/postinstall.cjs:456dangerous-shell

${YELLOW}  ║${RESET}  ${CYAN}Ubuntu:${RESET}  sudo apt install build-essential python3         ${YELLOW}║${RESET}

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0

MemOS

Plugins in this repository

Overview

Repository check result

Static repository check

Evidence breakdown