remembering-conversations
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Tasktool to dispatch a specializedsearch-conversationssubagent and provides documentation for direct access to MCP tools (mcp__plugin_episodic-memory_episodic-memory__searchandmcp__plugin_episodic-memory_episodic-memory__read). These tools are used to query and read local conversation archives. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks because it processes data from past conversations which may contain untrusted content.
- Ingestion points: The
readtool (described inMCP-TOOLS.md) ingests raw conversation data from.jsonlfiles located in the~/.config/superpowers/conversation-archive/directory. - Boundary markers: The instructions do not define boundary markers or explicit warnings for the agent to ignore instructions found within the retrieved historical data.
- Capability inventory: The skill facilitates complex task dispatching via the
Tasktool and subagent system, providing a path for retrieved instructions to influence agent behavior. - Sanitization: There is no mention of sanitization or validation logic for the content retrieved from historical archives.
Audit Metadata