memory-hygiene
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external repositories and research databases (GitHub, arXiv, Zenodo) to verify facts stored in its memory files. This creates a surface where external data could potentially contain malicious instructions intended to influence the agent's behavior during the re-verification or archival process. The skill mitigates this by requiring human confirmation and comparing results against a secondary fact-checker.
- [COMMAND_EXECUTION]: The skill employs
bashfor administrative tasks, including directory traversal, log generation usingprintf, and data integrity operations like creating compressed archives withtar. These operations are scoped to the agent's memory and metadata directories. - [EXTERNAL_DOWNLOADS]: To maintain memory hygiene, the skill fetches status updates and metadata from well-known services including GitHub (via the
ghCLI) and scientific repositories (viaWebFetch).
Audit Metadata