bm-setup
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of shared utility skills from the basicmachines-co repository using the
npx skills addcommand. This provides the agent with a standardized set of memory management capabilities from the vendor.- [COMMAND_EXECUTION]: The skill utilizes several command-line tools to perform environment setup and validation. Specifically, it usesgitto verify repository identity,npxto fetch skill modules, and thebasic-memory(orbm) CLI to perform health checks, verify project access, and smoke-test the integrity of seeded schemas.- [INDIRECT_PROMPT_INJECTION]: The setup process includes an automated step to learn placement conventions by reading existing notes and inferring schemas from the project directory, which represents a potential surface for indirect prompt injection. - Ingestion points: Data is read from the project's memory directory via
list_directory,schema_infer, andread_notetool calls. - Boundary markers: No specific boundary markers or "ignore instructions" warnings are applied to the content ingested from existing notes.
- Capability inventory: The skill has the capability to execute shell commands (
git,npx,basic-memory) and perform file system writes (write_note, settings file modification). - Sanitization: Content from existing notes is summarized into a
placementConventionsconfiguration string; no explicit sanitization of the input data is performed.
Audit Metadata