add-agent-memory
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
irisCLI to provision the Redis memory service, create API keys, and perform status checks. It correctly employs flags such as--no-inputand--jsonfor machine automation and recommends using--write-envto store sensitive credentials in a local environment file rather than displaying them in the terminal output. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the extraction of long-term memories from user conversations, which introduces a potential surface for indirect prompt injection.
- Ingestion points: Conversations are processed through the
redis_irislibrary (e.g., viaconvo.user()andconvo.assistant()) to record and recall facts. - Boundary markers: Memories are retrieved and injected into the agent's system prompt using the
as_prompt()method, which formats the data for the model. - Capability inventory: The skill includes shell command execution via the
irisCLI and file system operations, including writing toservice.yamland.envfiles. - Sanitization: The configuration allows for a specific
exclusions.promptto be defined in theservice.yamlfile, providing natural language instructions to the underlying service to ignore and avoid storing sensitive information like passwords or recovery codes.
Audit Metadata