walrus-memory
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and install official packages from the author's verified ecosystem.
- Python packages include
memwal(with optional support forlangchainandopenai). - Node.js packages include
@mysten-incubation/memwal,@mysten-incubation/memwal-mcp, and peer dependencies under the@mystenscope such as@mysten/sui,@mysten/seal, and@mysten/walrus. - These resources are consistent with the skill's purpose and originate from the author's known infrastructure.
- [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves processing untrusted user data to store as persistent memories, which introduces an indirect prompt injection surface.
- Ingestion points: User-provided strings are passed to the
remember,analyze, and middleware components defined inpython-sdk.mdandts-sdk.md. - Boundary markers: Documentation for the
withMemWalmiddleware indicates that retrieved memories are injected into the system prompt context for the LLM. - Capability inventory: The SDKs perform network operations to the Walrus Memory relayer, and the MCP server manages credentials locally in
~/.memwal/credentials.json. - Sanitization: No explicit sanitization of memory content is described, which is expected for this use case as the content is intended to be used as context for an AI model.
Audit Metadata