unified-memory
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
ecc-universalpackage from the npm registry to provide the core CLI and MCP functionality. - [COMMAND_EXECUTION]: The skill executes the
ecc memoryCLI andecc-memory-mcpserver to manage, search, and retrieve context documents from the local filesystem. - [PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection when ingesting shared memory documents.
- Ingestion points: The
memory_readandmemory_searchtools ingest Markdown documents from the local filesystem into the agent's context (SKILL.md). - Boundary markers: Present; the instructions explicitly direct the agent to treat recalled memory bodies as untrusted context and never as executable instructions (SKILL.md).
- Capability inventory: The skill provides capabilities to read, search, and write Markdown files to local repository paths or the user home directory (SKILL.md).
- Sanitization: Present; the documentation notes that the runtime includes a backstop filter to reject known secret shapes during memory storage (SKILL.md).
Audit Metadata