memex-fallback
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell logic to detect the availability of
codeagent-wrapperandmemex-cli, subsequently executing these tools to process tasks. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface due to the interpolation of untrusted task content into execution blocks.
- Ingestion points: Data is ingested via the
<TASK>and<content>placeholders in the SKILL.md execution templates. - Boundary markers: Uses
<TASK>tags and---CONTENT---headers as delimiters to isolate the injected content. - Capability inventory: The skill can execute shell commands through the identified CLI tools and interact with the local filesystem via the
$PWDvariable. - Sanitization: Uses shell heredoc quoting (
<<'EOF') to prevent variable expansion at the shell level, but lacks explicit filtering or validation of the instructions contained within the task blocks.
Audit Metadata