AI Extensions: AWS messaging skills, local memory and multi-model consultation
Three open-source agent tools checked for setup, license, activity and privacy on September 26. Stars are dated observations, not recommendations.
AI EXTENSIONS · DAILY DIGEST · 26 SEP 2026
Three tools today, and each one reaches into a different place. One helps set up real outbound messages. One keeps memory that outlives the session. One asks other models for a second opinion. A star count tells you how many people looked, not whether the thing is safe or good, and I installed and ran none of them for this digest.
What changed today
- AWS: Skills for sender verification and for setting up SMS, RCS and WhatsApp sending. Outbound only.
- mcp-memory-service: Memory that outlives the session. Check what it recalls against the original source.
- ConferLLM: A second model's opinion, which is not an independent fact check.
AWS agent messaging skills
Why it matters
Amazon SES and End User Messaging skills guide agents through sender verification, production access and SMS/RCS/WhatsApp setup. The Amazon SES skill is scoped to outbound onboarding, not inbound mail or Mail Manager. AWS announced the skills on 25 Sep.
Setup from official docs
AWS says install aws-core in Claude Code, Codex or Cursor; Kiro connects the AWS MCP Server and installs a channel skill. The SES guide names uv/uvx for local proxy, AWS credentials for API calls, and separate OAuth as an option.
License and maintenance
Apache-2.0 repository; service use subject to AWS terms · 26 Sep 2026 06:30 UTC · 2,726 stars · 330 forks (26 Sep 2026). Project-wide figures; do not assign them to a single skill.
Security and privacy
The skill can lead to sending messages and requesting production access. Inspect IAM scopes, account identity, recipients, domain verification and cost before any action. Documentation discovery needs no credentials, but API calls do. Do not turn a natural-language prompt into automatic sending.
mcp-memory-service
Why it matters
A persistent memory service for MCP agents with local SQLite, semantic retrieval, graph links and consolidation. It can carry context across tools and sessions; remembered text remains fallible and must be checked at the original source.
Setup from official docs
The README gives pip install mcp-memory-service and claude mcp add memory -- memory server as its short path. It documents local SQLite and additional server modes; choose storage and network binding deliberately.
License and maintenance
Apache-2.0 · 26 Sep 2026 10:53 UTC · 1,965 stars · 326 forks (26 Sep 2026).
Security and privacy
Memory may contain private prompts and records. The README warns that changing the default localhost bind to 0.0.0.0 exposes the API to a network and calls for proper authentication. Review ingestion, retention, deletion and remote access before real conversations.
ConferLLM
Why it matters
A CLI, Agent Skill and MCP server for consulting more than one AI provider with persistent sessions and optional local host tools. It gives a second-model view, not an independent fact check.
Setup from official docs
README: pip install conferllm, configure providers in ~/.conferllm/config.yaml, then conferllm skill install for an agent skill or conferllm serve for MCP. Provider keys and compatible local endpoints are configured separately.
License and maintenance
MIT · 22 Sep 2026 15:46 UTC · 11 stars · 3 forks (26 Sep 2026).
Security and privacy
Queries and attachments may leave the machine for chosen model providers, while local tools can touch files or execute work. Bound credentials and tool exposure; do not forward sensitive context by default. The README’s provider count is its own claim, not a tested compatibility matrix.
Analysis (Jack Gross)
Use a disposable AWS sandbox or fake recipient plan without sending, a fabricated memory corpus, and a redacted prompt for model consultation. Inspect the files, permissions, network destinations and logs before allowing real identity, history or provider credentials. Popularity and repository activity do not certify a package.
A safe evaluation workflow
What this digest is not
Today’s tools sit on three different boundaries: one can help configure real messages, one holds persistent memory, and one delegates to other models. Treat observed stars as a dated community signal, not a safety or quality score. None of these packages was installed or run for this digest.
Sources: AWS announcement · SES guide · AWS source · memory source · ConferLLM source. License, activity and community counts checked 2026-09-26 from project repositories.