memory-bank
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands such as
git log,git diff, andgit branchto synchronize its state with the repository. It also encourages the use of 'Memory Hooks' which can be configured to run arbitrary shell commands likepnpm installormake testduring the session workflow. - [DATA_EXPOSURE]: The system persists context in local files including
MEMORY.mdand~/.claude/GLOBAL-MEMORY.md. These files are intended to store project state and user preferences but involve cross-project data access. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as Git commit messages and project memory files which may be attacker-controlled in shared environments. Ingestion points:
MEMORY.mdand Git history (git log). Boundary markers: None. Capability inventory: File system modification and Git command execution. Sanitization: None.
Audit Metadata