context-management-context-restore
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOW
Full Analysis
- [SAFE] (SAFE): No malicious commands, obfuscation, or unauthorized data access patterns were detected. The skill is entirely descriptive.\n- [Indirect Prompt Injection] (LOW): The skill describes a process for loading data from external vector databases or file systems into an agent's context. While this identifies an inherent attack surface for indirect prompt injection, the skill itself lacks the executable logic to process this data or perform high-privilege side effects. (Evidence: 1. Ingestion: Vector DB and file system via 'context_source'; 2. Boundary markers: Absent; 3. Capability: Internal state rehydration only; 4. Sanitization: Not specified).
Audit Metadata