recall-resources
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/recall.pyusesos.execvto execute theresource-memorytool via theuvrunner. This is used to wrap the tool's CLI and allows the agent to perform local database operations. - [COMMAND_EXECUTION]: The skill includes management scripts like
scripts/wechat_data/doctor.pyandscripts/wechat_data/start_metrics_service.pythat execute shell commands (e.g.,networksetup) and launch local services viasubprocesscalls. - [EXTERNAL_DOWNLOADS]: The article acquisition logic in
scripts/wechat_data/download_urls.pysends user-provided WeChat URLs to an external API (https://down.mptext.top) to retrieve content. This is a documented external dependency used for scraping public articles. - [PROMPT_INJECTION]: The skill ingests external content from the web and WeChat articles into a local knowledge base. This creates an indirect prompt injection attack surface where malicious text within a saved article could influence the agent's future responses or actions when the resource is recalled.
Audit Metadata