talamus-memory
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local CLI tool (
talamus) to manage a SQLite-backed memory index, perform searches, and handle repository ingestion. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
talamuspackage via standard package managers (uv,pipx,pip) only when the executable is missing and after obtaining explicit user consent. - [EXTERNAL_DOWNLOADS]: Includes functionality to ingest content from external URLs (
talamus ingest PATH_OR_URL) to expand the local knowledge base. - [PROMPT_INJECTION]: The skill processes external data from repositories and URLs, creating an indirect prompt injection surface. It explicitly mitigates this by requiring citation markers, preserving provenance, and instructing the agent not to present unsupported information as fact.
- [COMMAND_EXECUTION]: Provides options to install agent integrations (MCP) and session-capture hooks, both of which are gated behind explicit user approval and safety warnings.
Audit Metadata