memory-audit
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform extensive file system operations, searching for memory indices and calculating directory statistics within~/.claude/and.claude/context/. - [COMMAND_EXECUTION]: Invokes local Node.js functionality via
node -eto call methods from thememory-manager.cjsmodule for API verification. - [PROMPT_INJECTION]: The skill processes untrusted content from memory files which creates a surface for indirect prompt injection. 1. Ingestion points: Reads
MEMORY.md,learnings.md, and JSON data stores. 2. Boundary markers: Lacks explicit separators or instructions to ignore instructions embedded within the memory data. 3. Capability inventory: UsesBashandTaskUpdateto perform actions and write to the file system based on audit results. 4. Sanitization: Does not perform validation or filtering of the content retrieved from memory stores before processing.
Audit Metadata