state
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill describes a standard infrastructure component for state management. It provides functions for setting, getting, updating, and deleting key-value pairs across a shared environment.
- [COMMAND_EXECUTION]: The documentation mentions the command
iii worker add stateto install the worker. This is a legitimate platform-specific administrative command used to manage worker extensions. - [DATA_EXPOSURE]: The skill facilitates data persistence using internal memory, local files, or external Redis instances. These are documented as primary features for shared state management and do not involve unauthorized data access or exfiltration.
- [PROMPT_INJECTION]: The skill acts as a transport and storage layer for opaque JSON data that can trigger downstream functions. While this creates a surface for indirect prompt injection if consuming functions are not properly secured, the state worker itself does not contain malicious injection patterns.
Audit Metadata