curator
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
hermesCLI tool viasubprocess.runinadapters.pyto export memory records. This interaction is implemented securely using a list-based argument structure to prevent command injection and does not utilize a shell environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from memory sources (JSON files or tool outputs) to generate wiki pages. It mitigates injection risks through comprehensive sanitization and rigorous path validation.
- Ingestion points: Data is read from
.knowledge/memory.jsonor through the output of thehermes mnemosyne exportcommand. - Boundary markers: Uses
<!-- lumen:auto:start -->and<!-- lumen:auto:end -->tags to delimit generated content within index and overview files, and neutralizes Markdown markers like[[and##in processed text. - Capability inventory: Performs file writes using an atomic write pattern (
_atomic_write) with built-in path validation. - Sanitization: Implements
_sanitize_inlineand_sanitize_namefunctions to escape special characters and normalize text before interpolation into Markdown files, preventing forgery of headers, links, or markers.
Audit Metadata