ReasoningBank with AgentDB
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill relies on external Node.js packages
agentdbandagentic-flowthat are not from pre-approved trusted sources. These packages are downloaded from the NPM registry during initialization and usage. - [COMMAND_EXECUTION]: The instructions utilize
npx agentdb@latestto execute code directly from the NPM registry. This includes initialization, data migration, and the setup of an MCP server (npx agentdb@latest mcp), which allows external code to run within the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to store and retrieve "experiences" and "trajectories" in a vector database to influence future agent decisions, which creates a potential injection surface.
- Ingestion points: Untrusted data is stored via
rb.insertPatternand retrieved viarb.retrieveWithReasoningas shown inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential commands embedded within the stored memory data.
- Capability inventory: The skill performs file writes to local database files (
.agentdb/reasoningbank.db) and executes shell commands vianpx. - Sanitization: The code snippets do not show any sanitization, validation, or filtering of the content being stored in or synthesized from the database.
Audit Metadata