tmcra-memory avatar

tmcra-memory

TMCRA Core — local-first, scope-isolated long-term memory runtime for AI agents.

PluginKnowledgeMemory
Verification
L2 · Structured
Security
Medium
Health
Active
Trust
Silver

What it does

TMCRA Core — local-first, scope-isolated long-term memory runtime for AI agents.

Installation

dsh plugin --profile web add github:reshuibuduo/tmcra-memory

Install method: GitHub · not yet tested in container (L3+)

Compatibility

DSH VersionStatus
not statedDeclared — not tested

Requirements

  • • Node.js: not stated
  • • DSH: declared "not stated"
  • • External credentials: none detected

Security Report

Automated static scan, not manual review.

DSH.SOWARNINGSCAN15 FILES
49c5a3
Automated review · daily
WARNING

No critical findings, but warning-level issues were detected (file writes, remote imports, base64 decoding, downloads).

0 critical·1 warning·3 info·15 files scanned
plugin version
scanned commit49c5a3648d182026-08-18
latest commit49c5a3648d18

The scan result is only valid for the scanned commit. If the latest commit differs, the badge shows outdated until the daily pipeline rescans.

Disclaimer: automated static analysis, not a security guarantee. Always review what you install.

Risk: Medium0 critical · 1 warning · 3 info

• Static heuristic scan: done (15 files)

• Dependency vulnerabilities: requires deep audit (L3+)

• Permission sandboxing: requires runtime testing (L4+)

Scan findings · 4

  • warningHTTP request to a raw IP addressintegrations/local-agent-hooks/scripts/configure.mjs:15
    baseUrl: option("--base-url", "http://127.0.0.1:2009"),
  • infoReads process.envintegrations/local-agent-hooks/scripts/configure.mjs:14
    outputPath: option("--output") || process.env.TMCRA_LOCAL_INTEGRATION_CONFIG || undefined,
  • infoReads process.envintegrations/local-agent-hooks/scripts/configure.mjs:16
    stateDir: option("--state-dir") || process.env.TMCRA_LOCAL_INTEGRATION_STATE_DIR || undefined,
  • infoHardcoded IP addressintegrations/local-agent-hooks/scripts/configure.mjs:15
    baseUrl: option("--base-url", "http://127.0.0.1:2009"),

Heuristic static scan — may produce false positives. Review the source yourself before trusting.

Activity

Last commit 2026-08-18 · activity: Active

• Repo created: 2026-08-18

• Stars: ★ 5 · Forks: 0

• Health: Active — committed within last 30 days

Source

GitHub: github.com/reshuibuduo/tmcra-memory

Was this page helpful?