lov-memory-add
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to manage local knowledge records and user preferences without performing any dangerous network or system operations.
- [DATA_EXPOSURE]: The provided management script
scripts/profile_store.pyincludes an explicit security filter (SENSITIVE_PARTS) that prevents the storage of fields containing sensitive keywords such as 'token', 'secret', 'password', 'credential', or 'api_key'. - [COMMAND_EXECUTION]: The skill provides Python utility scripts (
profile_store.pyandvalidate_skill.py) for maintaining user configurations and validating the integrity of the skill source. These scripts use safe practices, such asyaml.safe_loadand atomic file writes with restricted permissions (0o600). - [INDIRECT_PROMPT_INJECTION]: While the skill can ingest content from external URLs to generate knowledge notes, its workflow is designed to prevent fact hallucination by fetching actual content rather than relying on titles, and it stores this data in a structured, local-only format.
Audit Metadata