groove-utilities-memory-log-weekly
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local daily memory logs which could potentially contain instructions that override the agent's behavior during the roll-up process.
- Ingestion points: Markdown files located in the '.groove/memory/daily/' directory.
- Boundary markers: No delimiters or specific markers are defined to isolate external log content from the agent's primary instructions.
- Capability inventory: The skill is authorized to use Read, Write, Edit, Glob, Grep, and Bash (restricted to git commands).
- Sanitization: There is no logic provided to sanitize, filter, or validate the content of the daily files before synthesis.
- [NO_CODE]: The skill contains only markdown instructions and a template file; it does not include any standalone executable scripts or packages.
Audit Metadata