hunt-agent-memory-poisoning
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a security auditing guide and does not contain malicious instructions or patterns. It is intended for red-teaming and vulnerability research.
- [REMOTE_CODE_EXECUTION]: Includes a Python probe for testing API responses. This script is self-contained, uses standard Python libraries (urllib.request, uuid, json), and does not download or execute remote code.
- [PROMPT_INJECTION]: Describes prompt injection as a vector for memory poisoning in a purely theoretical and diagnostic context for security testing.
- [DATA_EXFILTRATION]: Mentions exfiltration techniques ('spAIware') as a threat model for identification purposes during security audits but does not implement them.
Audit Metadata