memory-bank
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill registers multiple lifecycle hooks in agent configuration files (e.g.,
settings.jsonfor Claude Code,hooks.jsonfor Cursor) to manage project state, session capture, and auto-actualization. - Modifies
~/.claude/settings.json,~/.cursor/hooks.json, and other agent-specific configuration paths. - This persistence is essential for the skill's documented purpose of maintaining long-term memory across sessions.
- [COMMAND_EXECUTION]: The tool performs extensive local shell command execution for developer workflows.
- Scripts like
mb-test-run.shandmb-rules-check.shinvoke local testing and linting tools. - The
mb-metrics.shscript detects project stacks and executes language-specific metric collectors. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository content while having access to powerful tools, creating a potential attack surface.
- Ingestion points: Analyzes source code and markdown files via
mb-context.shandmb-codegraph.py(file paths specified inSKILL.md). - Boundary markers: Employs specific markdown markers (e.g.,
<!-- memory-bank:start -->) to identify its own data blocks. - Capability inventory: Possesses full
Bashexecution,Write/Editfile access, and network research capabilities through subagents. - Sanitization: Implements
sc_redact_secretsandsc_strip_privateto prevent leakage of credentials or marked private data into session logs or LLM summaries. - [EXTERNAL_DOWNLOADS]: Fetches metadata from established registries to support maintenance and research functions.
mb-version-check.shqueries GitHub and PyPI APIs for update information.- The
mb-researchsubagent dispatches queries to external documentation and web sources as part of its research role. - [DYNAMIC_EXECUTION]: Implements dynamic module loading for language grammars.
memory_bank_skill/codegraph_treesitter.pyuses__import__to load language-specific tree-sitter modules dynamically based on the detected project stack.
Audit Metadata