amygdala-memory
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages its data and operations through several local shell scripts (
install.sh,get-state.sh,update-state.sh,load-emotion.sh,decay-emotion.sh,sync-state.sh). - [COMMAND_EXECUTION]: Persistence is achieved by setting up a cron job (
decay-emotion.sh) that runs every six hours to simulate emotional decay on the host system. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by generating an
AMYGDALA_STATE.mdfile designed for automatic injection into the agent's context. - Ingestion points:
AMYGDALA_STATE.mdis loaded from the workspace root into the agent's active session. - Boundary markers: Absent; the emotional state is injected as raw markdown content.
- Capability inventory: The skill possesses file-writing and scheduling capabilities through its included scripts.
- Sanitization: No sanitization of the generated state content is mentioned or implemented.
Audit Metadata