remember
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands like
grep,sed, andpwdto manage paths and search for existing project memory entries. These are standard operations for maintaining project-specific configuration files within the agent's workspace. - [INDIRECT_PROMPT_INJECTION]: The skill persists user-provided information into a
MEMORY.mdfile that is read by the agent in future sessions, which constitutes an indirect prompt injection surface. - Ingestion points: User input provided via the
/si:remembercommand is written to the filesystem. - Boundary markers: The data is stored in a markdown list format; however, there are no specific boundary markers or instructions to treat this stored content as untrusted during retrieval.
- Capability inventory: The skill executes file writes and local shell searches.
- Sanitization: No validation or sanitization is performed on the input before it is saved to the persistent memory file.
Audit Metadata