iris-development

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the official Redis SDKs redis-agent-memory (Python) and @redis-iris/agent-memory (TypeScript). These are legitimate, vendor-maintained packages for the 'redis' author.
  • [CREDENTIALS_UNSAFE]: Documentation in references/setup-auth-token.md and references/setup-cloud-service.md explicitly warns against hardcoding API keys. It provides secure examples using environment variables (AGENT_MEMORY_API_KEY) and secret managers.
  • [DATA_EXFILTRATION]: Network operations are restricted to official Redis Cloud data-plane endpoints (e.g., gcp-us-east4.memory.redis.io). There are no attempts to access sensitive local files or exfiltrate data to unauthorized domains.
  • [COMMAND_EXECUTION]: The provided code examples demonstrate standard SDK usage and environment variable configuration. No suspicious shell commands, privilege escalation, or persistence mechanisms are present.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 11:41 PM
Security Audit — agent-trust-hub — iris-development