bm-setup

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automates the installation of shared utility skills from the basicmachines-co repository using the npx skills add command. This provides the agent with a standardized set of memory management capabilities from the vendor.- [COMMAND_EXECUTION]: The skill utilizes several command-line tools to perform environment setup and validation. Specifically, it uses git to verify repository identity, npx to fetch skill modules, and the basic-memory (or bm) CLI to perform health checks, verify project access, and smoke-test the integrity of seeded schemas.- [INDIRECT_PROMPT_INJECTION]: The setup process includes an automated step to learn placement conventions by reading existing notes and inferring schemas from the project directory, which represents a potential surface for indirect prompt injection.
  • Ingestion points: Data is read from the project's memory directory via list_directory, schema_infer, and read_note tool calls.
  • Boundary markers: No specific boundary markers or "ignore instructions" warnings are applied to the content ingested from existing notes.
  • Capability inventory: The skill has the capability to execute shell commands (git, npx, basic-memory) and perform file system writes (write_note, settings file modification).
  • Sanitization: Content from existing notes is summarized into a placementConventions configuration string; no explicit sanitization of the input data is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 08:44 PM