memory-systems
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and Python reference code for building tiered memory systems. The implementation uses standard libraries (numpy, json, hashlib) and does not perform network operations or access sensitive system files.\n- [PROMPT_INJECTION]: The
MemoryContextIntegratorclass inreferences/implementation.mdprovides a functional pattern for indirect prompt injection by retrieving stored memories and injecting them into the context window.\n - Ingestion points: The
build_contextmethod inreferences/implementation.mdingests user-provided task strings to trigger entity-based memory retrieval.\n - Boundary markers: Absent. The logic uses simple newline delimiters (
\\n\\n) to separate retrieved memories from the primary context, which may allow retrieved instructions to influence agent behavior.\n - Capability inventory: No dangerous capabilities (shell execution, network calls, or file writes) are present in the provided scripts.\n
- Sanitization: No sanitization or validation of the retrieved memory content is performed before interpolation into the prompt.
Audit Metadata