Cognee

topoteretes/cogneeApache-2.00🔧 1 tools

F5.0SpiderScore (registry)

Knowledge Engine for AI Agent Memory in 6 lines of code

⚠ Hard constraint applied: multiple critical issues forces F
Decision
Not Recommended
Confidence
90%

Cognee is not recommended — low score (5.02/10) with 6 critical issues.

Recommended Actions

  • high
    Run In Container
    6 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • running in production without container isolation
  • exposing this tool to untrusted input
Risk Flags (1)
  • critical
    command_injection×6
    Command injection risk — subprocess called with shell=True and non-literal command
How This Was Decided
  • positivew=0.5Overall quality score = 5.02/10 (grade F)
  • negativew=0.86 critical security issue(s) detected
  • negativew=0.3Tool description clarity score = 2.4/10
Source: SpiderRating automated security scanUpdated: 2026-03-13Protocol: v1.1

Description Quality

Composite: 2.4 / 10

3-Layer Breakdown

Description (38%)
2.4
Security (34%)
4.2
Metadata (28%)
9.6

Description Dimensions

Intent Clarity
4.0
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
4.0
Operational Boundaries
2.9

Security Analysis

4.2
Score
6
Critical
0
High
0
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

6 CRITICAL

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
9.0
Popularity (25%)
9.7

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/topoteretes__cognee.svg)](https://spiderrating.com/servers/topoteretes/cognee)