mem0-oss-to-platform
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands (e.g.,
python -c) to inspect the signatures of the installedmem0library. This is a functional requirement to ensure the generated migration plan correctly maps API calls based on the version actually present in the user's environment. - [INDIRECT_PROMPT_INJECTION]: The skill scans project source code to identify Mem0 usage footprints. While this processes untrusted data, the risk is mitigated by a mandatory human-review step where the agent must stop and present a
MEM0_MIGRATION_PLAN.mdfor approval before executing any code modifications. - [DATA_EXPOSURE]: The skill audits environment variables and configuration files (like
.env) to find existing Mem0 settings. It explicitly instructs the agent and user to manage the newMEM0_API_KEYsecurely via environment variables or secrets managers rather than hardcoding it into the codebase.
Audit Metadata