Is rememb-mcp safe to install?

SaferSkills independently audited rememb-mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

src/rememb_skills/rememb-mcp/SKILL.md · 1 file

src/rememb_skills/rememb-mcp/SKILL.md1.4 KB · Markdown

name: rememb-mcp

description: Work safely on rememb MCP tools, schemas, and compatibility-sensitive server behavior. Use when the task changes MCP contracts, tool definitions, response formats, or backward-compatibility-sensitive server logic.

Rememb MCP Skill

Overview

Use this skill when working on rememb MCP tools, schemas, response strings, and backward-compatible server behavior.

When to Use

Apply this skill when a task changes MCP contracts, tool definitions, response formats, or compatibility-sensitive server logic.

Core Workflow

Identify the MCP-facing contract being changed.
Keep store and MCP layers aligned in arguments, validation, and returned messages.
Preserve existing tool names and defaults unless the change is explicitly additive.
Run a narrow contract-focused validation after the change.

Examples

Updating a tool schema in mcp_server.py
Adjusting MCP response strings without breaking clients
Verifying compatibility-sensitive handler changes

Best Practices

Preserve existing MCP tool names and defaults unless the change is explicitly additive.
Keep store and MCP layers aligned in arguments, validation, and returned messages.
Prefer narrow tests on the MCP contract after changing tool registration or handlers.

References

See the repository MCP instructions and adjacent MCP server handlers for contract details.

rememb-mcp— agent skill

Is rememb-mcp safe to install?

Rememb MCP Skill

Overview

When to Use

Core Workflow

Examples

Best Practices

References

Audit the pieces. Scan the whole. Decide.