memory-protocol
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill implements a persistent memory system that functions as an ingestion point for indirect prompt injection.
- Ingestion points: Knowledge is retrieved from the Memento MCP graph using
mcp__memento__semantic_searchandmcp__memento__open_nodes(as described inSKILL.md). - Boundary markers: Absent. The protocol does not instruct the agent to use specific delimiters or to disregard instructions embedded in recalled memory.
- Capability inventory: None. The skill is documentation-based and does not include any executable scripts or tools.
- Sanitization: Absent. No validation or sanitization steps are defined for data entering or leaving the memory graph.
- [EXTERNAL_DOWNLOADS]: The skill mentions an optional dependency on the
debugging-protocolskill, which can be installed from the author's own repository using thenpx skills add jwilger/agent-skillscommand (referenced inSKILL.md). - [NO_CODE]: The skill is composed entirely of Markdown and YAML configuration files; it includes no executable scripts in Python, JavaScript, or other languages.
Audit Metadata