Agent Memory Os

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  scripts/validation_run.py, line 175

  result = subprocess.run([sys.executable, "-m", "pytest", "-q", "--tb=no"],

  scripts/validation_run.py, line 314

  shutil.rmtree(tmp, ignore_errors=True)

  scripts/verify_acl_identities.py, line 119

  shutil.rmtree(home)

  Show more

  scripts/verify_downgrade_compatibility.py, line 431

  shutil.rmtree(home)

  src/agent_memory_os/cli.py, line 748

  result = subprocess.run([sys.executable, "-m", "pip", "install", spec])

  src/agent_memory_os/cli.py, line 925

  out = subprocess.check_output(

  src/agent_memory_os/cli.py, line 931

  out = subprocess.check_output(["ps", "-axo", "pid=,command="], text=True, timeout=PROCESS_LIST_TIMEOUT_SECONDS)

  src/agent_memory_os/cli.py, line 1003

  out = subprocess.check_output(["ps", "-p", str(pid), "-o", "etime="], text=True, timeout=PROCESS_ELAPSED_QUERY_TIMEOUT_SECONDS)

  src/agent_memory_os/cli.py, line 1087

  child = subprocess.Popen(argv, cwd=cwd, stdout=stdout, stderr=stderr,

  src/agent_memory_os/cli.py, line 1107

  return subprocess.run(

  src/agent_memory_os/cli.py, line 1216

  rc = subprocess.call(cmd)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Serious

  accepts a host from input, with no fixed list in this file.

  NETWORK_HOST_FROM_INPUT

  src/agent_memory_os/cli.py, line 585

  with urllib.request.urlopen(request, timeout=TEAM_UPDATE_REQUEST_TIMEOUT_SECONDS) as response: # noqa: S310

  src/agent_memory_os/cli.py, line 905

  with urllib.request.urlopen(f"https://pypi.org/pypi/{pkg}/json", timeout=PYPI_REQUEST_TIMEOUT_SECONDS) as resp:

  src/agent_memory_os/client.py, line 96

  """ACL-gated single-memory fetch (see MemoryStore.get_visible)."""

  Show more

  src/agent_memory_os/discovery.py, line 54

  with socket.create_connection((host, port), timeout=timeout):

  src/agent_memory_os/discovery.py, line 69

  with urllib.request.urlopen(request, timeout=timeout) as response: # noqa: S310

  src/agent_memory_os/fleet.py, line 44

  with urllib.request.urlopen(request, timeout=timeout) as response: # noqa: S310

  src/agent_memory_os/pairing.py, line 156

  with urllib.request.urlopen(request, timeout=timeout) as response: # noqa: S310

  src/agent_memory_os/sync.py, line 901

  with urllib.request.urlopen(

  src/agent_memory_os/web_ui.py, line 971

  const response = await fetch(proxied(path), request);

  src/agent_memory_os/web_ui.py, line 2501

  const response = await fetch("/api/sync/import", { method: "POST", headers, body });

  Dockerfile, line 37

  CMD ["python", "-c", "import os,urllib.request,sys; p=os.getenv('AMOS_PORT','8000'); sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:'+p+'/healthz',timeout=3).status==200 el

  docs/integrations/openclaw.md, line 46

  response = requests.get(f"{BASE}/api/context-pack", headers=HEADERS, params={

  docs/integrations/openclaw.md, line 52

  response = requests.post(f"{BASE}/api/memories", headers=HEADERS, json={

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  src/agent_memory_os/crypto.py, line 56

  env = os.getenv("AGENT_MEMORY_SYNC_KEY")

  src/agent_memory_os/web_app.py, line 283

  api_token = token or os.getenv("AGENT_MEMORY_WEB_TOKEN") or load_token(home)

  src/agent_memory_os/web_app.py, line 284

  ro_token = (readonly_token or os.getenv("AGENT_MEMORY_WEB_READONLY_TOKEN")

  Show more

  src/agent_memory_os/web_app.py, line 288

  sync_token = os.getenv("AGENT_MEMORY_WEB_SYNC_TOKEN") or load_token(home, tier="sync")

  src/agent_memory_os/web_app.py, line 1552

  if not (args.token or os.getenv("AGENT_MEMORY_WEB_TOKEN") or load_token(args.home)):

  .dockerignore, line 16

  *.db-shm

  .env.example, line 1

  # Copy to `.env` for docker compose. All optional.

  .gitignore, line 31

  *.sqlite-wal

  docker-compose.mesh.yml, line 22

  AGENT_MEMORY_WEB_TOKEN: ${AGENT_MEMORY_WEB_TOKEN:?set a shared token, e.g. in .env}

  docker-compose.yml, line 3

  # cp .env.example .env # (optional) set a fixed API token

  docs/DOCKER.md, line 34

  cp .env.example .env # optional: set AGENT_MEMORY_WEB_TOKEN

  docs/DOCKER.md, line 114

  echo "AGENT_MEMORY_SYNC_KEY=$(openssl rand -hex 32)"; } > .env

  docs/DOCKER.md, line 118

  TOK=$(grep AGENT_MEMORY_WEB_TOKEN .env | cut -d= -f2)

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Concern

  contains an encoded blob in a file that should be readable. contains a minified payload.

  OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD

  src/agent_memory_os/assets.py, line 3

  _LOGO_DATA_URI = "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAaSklEQVR42u19e5xcVZXut9Y+9eruJCSQDBCBGwElCQ8xjCCPVMOIg3AND62+QhSVQDIMOjiOw3VGZ6rrN3P1N97fiMx4

  src/agent_memory_os/assets.py, line 3

  WEB_UI_LOGO_DATA_URI = "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAIAAAACACAYAAADDPmHLAAAaSklEQVR42u19e5xcVZXut9Y+9eruJCSQDBCBGwElCQ8xjCCPVMOIg3AND62+QhSVQDIMOjiOw3VGZ6rrN3P1N9

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 2932382b430a. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. contains an encoded blob in a file that should be readable. contains a minified payload.

Date and source

Date checked: 23 Oct 2026

Read how this letter is chosen