PPenfield - Persistent Memory and Knowledge Graphs for AI AgentsPenfield gives AI agents long-term memory that compounds over time. Instead of starting every session from zero, your agent remembers conversations, learns preferences, connects ideas, and picks up exactly where it left off. Core capabilities: - 16 tools covering memory CRUD, knowledge graph, context management, artifacts, and reflection - Hybrid search with tunable weights — BM25 (keyword), vector (semantic), and graph traversal - Knowledge graph with 24 relationship types across 8 categories (evolution, evidence, hierarchy, causation, implementation, conversation, sequence, dependencies) - Context checkpoints for session handoff between agents or channels - Artifact storage for files, diagrams, and reference docs - 11 memory types intelligent filtering - Personality system with configurable personas via the portal Also available as a Claude Connector, Claude Code integration, native OpenClaw plugin (4-5x faster), and direct API.

mcp-so:penfield_Penfield

View source
A
100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

1

Score

100/100

LOW 1

Findings (1)

LOW
npx MCP server without version pin
L298

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"
FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.