Back to search
medium low high medium low
? Not scanned yet
io.github.alphaonedev/ai-memory
Author alphaonedev
Scanned 48d ago
Persistent memory for any AI — zero token cost until recall
Versions
0.5.1first seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 5
network Server uses network capabilities via: fetch(), httpx, requests, urllib filesystem Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile shell Server uses shell capabilities via: child_process, spawn(), subprocess database Server uses database capabilities via: sqlite3 env_vars Server uses env_vars capabilities via: os.environ, process.env Scan Findings 52
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: undici@6.21.0 (GHSA-2mjp-6q6p-2qxm)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-35p6-xmwp-9g52)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-4992-7rv2-5pvq)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-8xcm-r25x-g524)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-c76h-2ccp-4975)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-cxrh-j4jr-qwg3)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-f269-vfmq-vjvj)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-g8m3-5g58-fq7m)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-g9mf-h72j-4rw9)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-m8rv-5g2x-5cg5)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-p88m-4jfj-68fv)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-v3r7-h72x-cjcm)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-v9p9-hfj2-hcw8)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-vrm6-8vpv-qv8q)
medium
Vulnerable dependency: undici@6.21.0 (GHSA-vxpw-j846-p89q)
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0 (PYSEC-2026-1812)
info
package.json metadata
info
pyproject.toml metadata
info
Required env vars (16)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 280 components
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/scripts/postgres-droplet-reinit.sh
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/docs/migration-v0.7.0-postgres.md
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/docs/postgres-age-guide.md
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/docs/RUNBOOK-chaos-campaign.md
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/docs/migration-v064-to-v070.md
high
Generic API Key Assignment found in alphaonedev-ai-memory-mcp-96b8c69/src/llm.rs
critical
RSA Private Key found in alphaonedev-ai-memory-mcp-96b8c69/src/export_taxonomy.rs
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/src/migrate.rs
critical
AWS Access Key ID found in alphaonedev-ai-memory-mcp-96b8c69/src/secret_screen.rs
critical
GitHub Personal Access Token found in alphaonedev-ai-memory-mcp-96b8c69/src/secret_screen.rs
critical
RSA Private Key found in alphaonedev-ai-memory-mcp-96b8c69/src/secret_screen.rs
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/src/daemon_runtime.rs
critical
AWS Access Key ID found in alphaonedev-ai-memory-mcp-96b8c69/src/hooks/executor.rs
critical
AWS Secret Access Key found in alphaonedev-ai-memory-mcp-96b8c69/src/hooks/executor.rs
critical
RSA Private Key found in alphaonedev-ai-memory-mcp-96b8c69/src/hooks/executor.rs
critical
GitHub Personal Access Token found in alphaonedev-ai-memory-mcp-96b8c69/src/identity/cid.rs
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/src/cli/schema_init.rs
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/src/store/postgres.rs
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/.github/workflows/ci.yml
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/.github/workflows/postgres-parity-nightly.yml
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/.github/workflows/coverage.yml
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/infra/aws-gpu-burst/cloud-init-memory.yaml.tpl
critical
Database URL with Password found in alphaonedev-ai-memory-mcp-96b8c69/infra/do-hive/cloud-init-memory.yaml.tpl
medium
No build provenance detected (SLSA L0)