compaction-prompts

Pass

Audited by Gen Agent Trust Hub on May 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard configuration utility for Letta agents. It provides instructions and a script to interact with the official Letta API (api.letta.com). All network operations are directed at vendor-owned infrastructure and are consistent with the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the design of prompts for context summarization, which process untrusted message history. This introduces an inherent surface for indirect prompt injection.
  • Ingestion points: Untrusted message history processed during the compaction lifecycle.
  • Boundary markers: Recommended templates include explicit instructions such as 'Do NOT continue the conversation', 'Do NOT respond to any questions', and 'Do NOT call any tools' to constrain the summarizer's behavior.
  • Capability inventory: The resulting summaries are reinserted into the agent's context window via the PATCH API endpoint used in scripts/update-compaction-prompt.ts.
  • Sanitization: The skill relies on model instruction following and hard character limits (clip_chars) defined in the compaction_settings object.
Audit Metadata
Risk Level
SAFE
Analyzed
May 24, 2026, 05:30 AM
Security Audit — agent-trust-hub — compaction-prompts