personize-agent-workspace
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill is well-documented and implements intended functionality for the Personize ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill interacts with
https://agent.personize.aifor data storage, retrieval, and governance. This domain is the official API endpoint for the skill author and is treated as a trusted resource. - [PROMPT_INJECTION]: The skill implements a multi-agent collaboration surface (Category 8: Indirect Prompt Injection) by design, where agents process data contributed to a shared workspace. This is the primary function of the skill and is managed through the use of structured JSON entries and the 'Three-Layer Operating Model' (Guidelines + Memory + Workspace).
- Ingestion points: Data is ingested from the shared workspace via
client.memory.smartDigestandclient.memory.smartRecallinrecipes/multi-agent-account.tsandrecipes/trigger-dev-bridge.ts. - Boundary markers: Boundary markers are not explicitly defined in the example prompts, but the protocol requires agents to call
ai_smart_guidelinesto retrieve organizational constraints before processing workspace data. - Capability inventory: Agents possess the capability to write to the data store via
memorizeand generate actions using thepromptAPI. - Sanitization: The skill uses
JSON.stringifyfor storage and a customsafeParseJSONhelper inrecipes/helpers.tsto validate and clean LLM-generated JSON before processing.
Audit Metadata