hooks-explainer
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its mandatory memory protocol.
- Ingestion points: The agent is instructed to read content from .claude/context/memory/learnings.md and .claude/context/memory/decisions.md at the start of its process.
- Boundary markers: The instructions lack delimiters or specific directives to treat memory content as data rather than instructions, which could allow malicious content in those files to influence agent behavior.
- Capability inventory: The skill has access to the Bash, Read, and Write tools, providing a surface for action if an injection occurs.
- Sanitization: There is no logic provided to sanitize or validate the content retrieved from the memory files before it enters the agent context.
Audit Metadata