claudemem-search
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to search and analyze external codebases and framework documentation. This creates a vulnerability where malicious instructions embedded in the analyzed code or documentation (indirect prompt injection) could influence the agent's behavior.
- Ingestion points: The skill ingests raw code chunks, symbol summaries, and documentation from the local environment and external sources via
claudemem searchandclaudemem docs. - Boundary markers: The instructions lack explicit boundary markers or directives for the agent to treat search results as passive data rather than instructions.
- Capability inventory: The skill utilizes
BashandTasktools, which provide the ability to execute shell commands and modify the filesystem. - Sanitization: There is no mention of sanitization or safety filtering for the content retrieved during search and mapping operations.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of external software and retrieves documentation from third-party services.
- Software installation: The skill instructs the user to install the
claude-codememutility vianpm install -g claude-codememorbrew install claudemem. - Documentation providers: The
docs fetchcommand retrieves data from external providers includingContext7(context7.com) andDevDocs(devdocs.io).
Audit Metadata