Atlas / Skills / supermemoryai / claude-supermemory

claude-supermemoryBLOCK

skills/supermemoryai/super-save

Enable Claude Code to learn in real-time, update it's knowledge, and grow with you, using supermemory.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Version
—
Hosts
2 documented
License
—
Stars
2,793
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Persistent memory for Claude Code, powered by [Supermemory](https://supermemory.ai)

[](https://github.com/supermemoryai/claude-supermemory) [](#license)

Conceptual overview. Some command names in the image predate the current plugin; see Commands for what's available now.

A Claude Code plugin that gives your agent persistent memory across sessions using Supermemory. Your agent remembers what you worked on, across sessions and across projects.

Install · Features · How it works · Shared containers · Configuration · Commands · Privacy

Installation

Requires Node.js 18+ on your PATH. The memory hooks run as Node scripts.
/plugin marketplace add supermemoryai/claude-supermemory
/plugin install supermemory

Set your API key (get one at console.supermemory.ai), or just start a session and let browser login handle it:

export SUPERMEMORY_CC_API_KEY="sm_..."

Migrating from the old claude-supermemory plugin

That plugin was renamed to supermemory, so it won't update in place. Migrate with:

/plugin marketplace update supermemory-plugins
/plugin install supermemory@supermemory-plugins

Then, only if you still have the old plugin installed, remove it:

/plugin uninstall claude-
Read from source at commit 933d76442683OBSERVED · 2026-10-20
Advertisement
02

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
claude-codementioned
codexmentioned
03

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (2 observation(s))
Network
declared (3 observation(s))
Shell
declared (5 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (9)

CRITICALPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
plugin/commands/status.md:14
It resolves the same key source, namespace, REST URL, and API version as the hooks. Interpret `200` with `authenticated: true` as profile access working; `401` as authentication failed; `403` as permi
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
MEDIUMInventory / provenance · skill.no_skill_md · CWE-1104
Why it matters. no SKILL.md at the audited path
Fix. a skill without its instruction file cannot be reviewed as one
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
test/unit.mjs:771
writeState('../../session-a', 'context', { status: 'ready', memoryItemsLoaded: 4 }, { dataDir, now: 1000 }),
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
test/unit.mjs:777
const first = readState('../../session-a', { dataDir });
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
test/unit.mjs:784
const traversalDir = getSessionDir('../../session-a', dataDir);
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
test/unit.mjs:131
resolve({ url: `http://127.0.0.1:${server.address().port}`, requests });
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
test/unit.mjs:659
SUPERMEMORY_MCP_URL: 'http://127.0.0.1:1/mcp',
LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
plugin/hooks/templates/auth-success.html:25
<img class="hero-image" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAkIAAAGwCAYAAABFFQqPAAAAAXNSR0IArs4c6QAAAERlWElmTU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAACQqADAAQAA
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@biomejs/biome
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: critical_finding, no_behavioural_pass, undeclared_transfer.

Audited 2026-10-20 · audit v0.4.1 · source sha 933d76442683full audit observations/trust-audit/skill/supermemoryai__super-save.json · Report an issue / request a re-scan
04

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-20933d76442683BLOCKD69first audit
05

Questions

What does the super-save — supermemoryai/claude-supermemory skill do?

Enable Claude Code to learn in real-time, update it's knowledge, and grow with you, using supermemory.

Is super-save — supermemoryai/claude-supermemory safe to install?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What can super-save — supermemoryai/claude-supermemory access on my machine?

The audit observed that it reaches the network, runs shell commands and reads or writes files. Each of those is consistent with what it says it does. Secrets in the source: none found.

Which assistants does super-save — supermemoryai/claude-supermemory work with?

Its documentation mentions claude-code and codex. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (933d76442683), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.

Add this badge to your README

Shows this page's audit result and links back to it. It updates when the audit does.

ModelsAtlas audit badge

Markdown
[![ModelsAtlas audit: claude-supermemory](https://modelsatlas.com/skills/supermemoryai/super-save/badge.svg)](https://modelsatlas.com/skills/supermemoryai/super-save/)

Not your listing, or something out of date? Claim or update your listing.

Advertisement