manage-agents
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
create_agent_memories_simple.pyuses theuvxtool to download and execute themcp-neo4j-memorypackage from the public PyPI registry to manage agent context in a Neo4j database. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute validation logic and interact with CLI-based testing tools, which is consistent with its role in managing system-level agent configurations. - [PROMPT_INJECTION]: The skill processes markdown-based agent definitions, presenting an indirect prompt injection surface.
- Ingestion points: Metadata and instructions are ingested from markdown files located in
.claude/agents/as seen in theextract_agent_metadatalogic inscripts/agent_detector_example.py. - Boundary markers: The system uses YAML frontmatter delimiters (
---) to distinguish between configuration parameters and system prompt instructions. - Capability inventory: Agents managed by this skill can be configured with powerful tools such as
Bash,Write, andEdit, as documented in the configuration reference. - Sanitization: The implementation uses
yaml.safe_load()to ensure that configuration parsing does not trigger unsafe code execution through YAML deserialization.
Audit Metadata