
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@vaur94/agz-memory-plugin
Advanced tools
Safe automatic memory capture and bounded context injection for OpenCode V2
English | Türkçe
Optional OpenCode V2 adapter for @vaur94/agz-memory@0.5.2. It adds explicit
project binding, redacted capture, bounded retrieval, and staged context
injection to OpenCode 0.0.0-beta-18743.
0.5.2 status: This repository documents the 0.5.2 release surface and compatibility contract; npm publication and Git hosting state are tracked separately.
The package is safe when merely installed. Defaults are mode: "off", no
bindings, capture disabled, automatic project creation forbidden, semantic
backend none, at most eight cards, at most 4,800 characters, and a 300 ms
retrieval deadline.
{
"plugins": [
{
"package": "@vaur94/agz-memory-plugin@0.5.2",
"options": {
"mode": "off",
"autoCreateProjects": false,
"bindings": [],
"capture": {
"enabled": false,
"allowedKinds": ["preference", "decision"],
"minConfidence": 0.95
},
"retrieval": {
"semanticBackend": "none",
"timeoutMs": 300,
"maxCards": 8,
"maxCharacters": 4800
}
}
}
]
}
Keep off until the MCP server and database are healthy. Add one explicit
binding, then progress through shadow-capture, shadow-retrieval, inject,
and auto-write only after reviewing each stage. A version mismatch, missing or
conflicting binding, database error, or unsupported semantic backend disables
the plugin rather than guessing.
Installing this plugin also installs its exact core dependency, which contains
the agz-memory skill catalog. OpenCode does not discover skills inside npm
dependencies automatically; use the explicit versioned skills source in the
repository README. The plugin never edits the user's global AGENTS.md.
See the repository README for binding fields, mode behavior, recovery commands, and the security model.
FAQs
Safe automatic memory capture and bounded context injection for OpenCode V2
The npm package @vaur94/agz-memory-plugin receives a total of 649 weekly downloads. As such, @vaur94/agz-memory-plugin popularity was classified as not popular.
We found that @vaur94/agz-memory-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.