reasoningbank-agentdb
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
agentdbandagentic-flowpackages from the npm registry to provide database and reasoning capabilities. - [COMMAND_EXECUTION]: Provides instructions to initialize local databases, migrate legacy data, and configure an MCP server using
npx agentdb. These commands are standard for the described functionality. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process agent 'trajectories' and 'experiences'. This creates a surface for indirect prompt injection if the stored historical data includes adversarial instructions that are later retrieved and synthesized into the agent's context.
- Ingestion points: Reads patterns and memories from local database files (
.agentdb/reasoningbank.dband.swarm/memory.db) as shown in SKILL.md. - Boundary markers: None identified in the provided TypeScript examples.
- Capability inventory: Accesses the file system for database management and executes shell commands for MCP integration as described in SKILL.md.
- Sanitization: Relies on standard JSON serialization for pattern data storage.
Audit Metadata