team-memory-capture
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions proactively mitigate data exposure risks by requiring the agent to redact secrets, tokens, personal identifiers, and private URLs before publishing any content.
- [SAFE]: No patterns associated with credential exfiltration, persistence, or privilege escalation were detected in the instructions or the configuration file.
- [PROMPT_INJECTION]: The skill processes untrusted external data such as debugging paths and logs, which creates a potential surface for indirect prompt injection.
- Ingestion points: Project learnings derived from fixes, failed approaches, and debugging paths (SKILL.md).
- Boundary markers: The instructions do not specify explicit delimiters for untrusted input data.
- Capability inventory: The skill is primarily focused on drafting documentation and does not invoke dangerous system tools or network operations.
- Sanitization: The instructions include mandatory redaction of PII and credentials, reducing the impact of processed data exposure.
Audit Metadata