remembering-conversations
Fail
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: HIGHPERSISTENCEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The
install-hookscript modifies the~/.claude/hooks/sessionEndlifecycle hook to automatically execute the indexing tool whenever a session concludes, ensuring its code runs periodically without user intervention. - [DATA_EXFILTRATION]: The
summarizer.tscomponent reads user conversation logs from the local file system and transmits the content to the Anthropic API via the@anthropic-ai/claude-agent-sdkto generate summaries. - [EXTERNAL_DOWNLOADS]: The
embeddings.tsfile utilizes the@xenova/transformerslibrary, which fetches theall-MiniLM-L6-v2model from Hugging Face's official repository during the initial execution. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves summarizing and indexing conversation logs, which creates a potential surface for indirect prompt injection if the processed logs contain malicious instructions from untrusted sources.
- [COMMAND_EXECUTION]: Several shell scripts (
install-hook,index-conversations,search-conversations) perform file system modifications and execute TypeScript logic usingnpx tsx.
Recommendations
- AI detected serious security threats
Audit Metadata