nano-memory
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to search and list files within the local directory structure.
- Evidence: Instructions include using
grep,ls,findstr, andSelect-Stringdepending on the host operating system to locate information in thememory/directory andMEMORY.mdfile. - Context: These commands are limited to local file searches and do not involve network operations or administrative privileges.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface for indirect prompt injection by reading files that might store untrusted external data.
- Ingestion points: Data enters the agent's context through the native
read_filetool when accessingMEMORY.mdand daily logs in thememory/directory. - Boundary markers: The skill does not specify the use of delimiters or 'ignore' instructions when reading retrieved memory content.
- Capability inventory: The agent has the ability to write to the filesystem (
write_file,edit_file) and execute shell search commands. - Sanitization: No sanitization or validation logic is defined for data before it is written to or read from the memory files, though there is a manual guideline for the agent to avoid recording sensitive credentials.
Audit Metadata