gam-agentic-memory
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (PDFs, JSONL, videos) via the
wf.add()command to build hierarchical memory. This creates a surface for indirect prompt injection where instructions hidden in the files could influence agent behavior. Ingestion points: Content added viawf.add()inSKILL.md. Boundary markers: Absent. Capability inventory: Querying memory viawf.request()or SDK. Sanitization: Absent. - [EXTERNAL_DOWNLOADS]: The documentation provides standard
pip installcommands for local development and dependency management. - [SAFE]: The skill demonstrates secure credential handling by instructing users to use environment variables like
GAM_API_KEYinstead of hardcoding secrets.
Audit Metadata