letta-fleet-management
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
mcp_serversconfiguration allows for executing shell commands, such asnpx, to initialize and run Model Context Protocol (MCP) servers (e.g.,@anthropic/mcp-server-filesystem). This is a core architectural feature for extending agent capabilities. - [EXTERNAL_DOWNLOADS]: The skill configuration references external services and official package registries, including Firecrawl for MCP tools and Supabase for cloud storage buckets. These are well-known services used for data ingestion and agent functionality.
- [DATA_EXFILTRATION]: The
exportandimportcommands facilitate the movement of agent configurations, metadata, and message history between environments. This is a standard management function for backup and migration. - [PROMPT_INJECTION]: The documentation defines the use of
system_promptandfirst_messagefields to prime agent behavior and establish roles. These instructions are standard configuration parameters for AI agents. - [COMMAND_EXECUTION]: The tool enables dynamic tool definition using the
source_codeattribute or by loading local Python files. This allows for programmatic customization of agent tools within the fleet management workflow.
Audit Metadata