walrus-memory

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to download and install official packages from the author's verified ecosystem.
  • Python packages include memwal (with optional support for langchain and openai).
  • Node.js packages include @mysten-incubation/memwal, @mysten-incubation/memwal-mcp, and peer dependencies under the @mysten scope such as @mysten/sui, @mysten/seal, and @mysten/walrus.
  • These resources are consistent with the skill's purpose and originate from the author's known infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill's core functionality involves processing untrusted user data to store as persistent memories, which introduces an indirect prompt injection surface.
  • Ingestion points: User-provided strings are passed to the remember, analyze, and middleware components defined in python-sdk.md and ts-sdk.md.
  • Boundary markers: Documentation for the withMemWal middleware indicates that retrieved memories are injected into the system prompt context for the LLM.
  • Capability inventory: The SDKs perform network operations to the Walrus Memory relayer, and the MCP server manages credentials locally in ~/.memwal/credentials.json.
  • Sanitization: No explicit sanitization of memory content is described, which is expected for this use case as the content is intended to be used as context for an AI model.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 07:18 AM