agentmemory-config
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains informational documentation regarding the configuration of the agentmemory tool. It describes environment variables, port mappings, and feature toggles without executing commands or requesting elevated permissions.
- [CREDENTIALS_SAFE]: The skill references sensitive configuration like
ANTHROPIC_API_KEYandAGENTMEMORY_SECRET. It correctly suggests using a local.envfile (~/.agentmemory/.env) for storage and uses placeholders for examples, which is a standard and safe practice for credential management. - [INDIRECT_PROMPT_INJECTION]: The skill documents the
AGENTMEMORY_INJECT_CONTEXTfeature, which enables automatic context injection into agent prompts. This represents an attack surface for indirect prompt injection at the platform level; however, the skill itself is purely configurational and does not implement the injection mechanism or provide malicious data payloads. - Ingestion points: The system reads memory data, potentially from external sources configured via
AGENTMEMORY_URLorAGENTMEMORY_DATA_DIR(REFERENCE.md). - Boundary markers: Not specified in the configuration documentation.
- Capability inventory: The configuration enables context injection and tool visibility (
AGENTMEMORY_TOOLS). - Sanitization: Not specified in the configuration documentation.
Audit Metadata