android-memory-remediate
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data from the target project environment, including source code, project-specific instructions, and QA logs. This creates an indirect prompt injection surface where malicious instructions could be embedded in these files to influence the agent's behavior.
- Ingestion points: The agent reads target project source, tests, architecture, instructions, and QA logs as defined in the workflow of
SKILL.md. - Boundary markers: The instructions lack explicit requirements for delimiters or warnings to ignore instructions embedded within the processed data.
- Capability inventory: The skill has the capability to modify files and execute local validation commands based on its analysis of the ingested data.
- Sanitization: There is no mention of sanitization or content validation for the project files or logs.
- [COMMAND_EXECUTION]: The skill is directed to run the "target project's documented, executable validation commands" to verify fixes. While necessary for the skill's stated purpose, this involves the execution of code within the local environment based on instructions found in the target project's files.
Audit Metadata