reasoningbank-with-agentdb
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
execSyncand shell scripts to manage database operations and trajectory tracking. data-migration-example.jsandtrajectory-optimization-example.jsexecute local Python and Bash scripts (migration-tool.py,trajectory-tracker.sh).- Examples in
SKILL.mdsuggest usingnpx agentdb@latestto initialize databases and start MCP servers, which involves downloading and executing remote packages. - [INDIRECT_PROMPT_INJECTION]: The skill implements adaptive learning by storing, retrieving, and synthesizing "experiences" and "trajectories." This creates a vulnerability surface where malicious instructions embedded in stored data could influence the agent's behavior during memory distillation or context synthesis.
- Ingestion points:
trajectory-tracker.sh(via command-line arguments for task results) and theinsertPatternAPI inSKILL.md. - Boundary markers: The provided scripts do not implement explicit delimiters or "ignore embedded instructions" headers when synthesizing memory context.
- Capability inventory: The agent has access to
Bash,execSync, and file system operations across the skill's environment. - Sanitization: While the skill documentation recommends sanitizing metadata, the implementation in
trajectory-tracker.shrelies onjqfor JSON escaping, which ensures structural integrity but does not perform semantic sanitization of potential prompt injection content. - [EXTERNAL_DOWNLOADS]: The skill instructions and scripts download the
agentdbpackage from the NPM registry vianpx. This is documented as a standard dependency but represents an external code fetch. - [DYNAMIC_EXECUTION]: The skill dynamically generates and executes logic across multiple environments, including Node.js, Python, and Bash, often passing data between them via command-line arguments and JSON files.
Audit Metadata