hermes-mnemosyne
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
python3subshells to inspect specific environment variables (prefixed withMNEMOSYNE) and to parse local YAML configuration files. These operations are limited to the agent's own configuration environment for troubleshooting purposes. - [EXTERNAL_DOWNLOADS]: The skill mentions external packages
mnemosyne-memoryandmnemosyne-hermeswhich are required for the memory provider's functionality. It references the official repositorymnemosyne-oss/mnemosyneand provides instructions for repairing installations via the package's own installer script. - [PROMPT_INJECTION]: The skill manages a memory engine that ingests untrusted conversational data.
- Ingestion points: Data enters the system via the
working_memorydatabase and episodic summaries created during the 'sleep' consolidation process. - Boundary markers: The instructions do not specify explicit delimiters for stored memory content but recommend using a host LLM for compression.
- Capability inventory: The skill uses CLI tools (
mnemosyne,hermes) and Python snippets for diagnostics and memory management. - Sanitization: The skill provides a detailed workflow for identifying and invalidating 'junk' or transport-layer artifacts (e.g., gateway errors) that could otherwise influence future agent responses.
Audit Metadata