memory-management
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
almaCLI tool to interact with the file system and perform memory-related tasks. It manages data in thethreads/workspace directory and the~/.config/alma/directory. These operations are restricted to the vendor's established toolset and data paths. - [PROMPT_INJECTION]: The skill processes historical data, which introduces a potential surface for indirect prompt injection. Content from past interactions or group logs could contain instructions that influence the agent's behavior upon retrieval.
- Ingestion points: Conversation archives in
threads/, group chat logs in~/.config/alma/groups/, and per-person profiles in~/.config/alma/people/. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands within the retrieved memory content.
- Capability inventory: The agent has access to
Bash,Read, andWritetools to perform operations mediated by thealmaCLI. - Sanitization: There is no evidence of content sanitization or validation for retrieved memory or log data prior to its inclusion in the agent's context.
Audit Metadata