recall
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
findandgrepshell commands to perform keyword searches within local conversation history files. - [DATA_EXFILTRATION]: The skill reads from sensitive application data files, including
history.jsonlandMEMORY.md, which store session transcripts and memories. This access is necessary for the recall feature and does not involve exfiltration to external domains. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes data from previous conversations which may contain untrusted content.
- Ingestion points: Data is read from local
history.jsonlandMEMORY.mdfiles. - Boundary markers: There are no markers or instructions defined to isolate recalled content from the agent's command logic.
- Capability inventory: Uses shell commands (
find,grep) and memory tools. - Sanitization: No evidence of content sanitization exists for the recalled data.
Audit Metadata