memory-personalization
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill establishes a protocol for using memory and personalization tools to improve agent responses.
- It utilizes platform-integrated tools
save_memoryandrecall_memoriesfor state management. - The instructions provide proactive privacy guidelines, explicitly telling the agent to exclude health, financial, and identity details from long-term storage unless specifically directed by the user.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting and storing user-provided data, which creates a potential surface for indirect prompt injection.
- Ingestion points: User requests and choices are captured and stored as "facts" via the
save_memorytool. - Boundary markers: The skill does not define specific delimiters for stored memory content, although it prioritizes current session instructions over saved defaults.
- Capability inventory: The skill utilizes
save_memoryfor persistence andrecall_memoriesfor context retrieval. - Sanitization: Includes negative constraints to prevent the storage of sensitive data categories (health, financial, identity).
Audit Metadata