memory-graph
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires running an installation script (
assets/install.sh) that unzips a bundled binary (memory-graph) and installs it to the user's local directory (~/.local/bin). This is a standard installation procedure for this tool. - [DATA_EXPOSURE]: The skill uses
/tmp/memory-apply.yamlto store temporary data for user review. While typical for temporary storage, users should be aware that/tmpis a shared system directory. - [INDIRECT_PROMPT_INJECTION]: The skill parses conversation history to提炼 (extract) conclusions and rules. It mitigates potential injection risks by implementing a mandatory human-in-the-loop step, requiring the user to review and confirm the extracted data before it is written to the global memory store.
Audit Metadata