skills/ruvnet/ruflo/rvf-manage/Gen Agent Trust Hub

rvf-manage

Pass

Audited by Gen Agent Trust Hub on May 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to download and run the @claude-flow/cli package from the NPM registry. This is a standard method for executing project-specific utilities.\n- [COMMAND_EXECUTION]: Shell commands are used via the Bash tool to perform memory export and migration tasks, such as hooks transfer store. This is consistent with the skill's stated purpose of managing portable memory files.\n- [PROMPT_INJECTION]: An indirect prompt injection surface exists through the memory importation process.\n
  • Ingestion points: External data is ingested through the mcp__claude-flow__memory_import_claude tool, which retrieves entries from Claude Code memory stores.\n
  • Boundary markers: The skill does not explicitly use delimiters or instruction-ignore blocks when processing imported memory content.\n
  • Capability inventory: The environment allows for file system operations and shell command execution through the Bash and hooks_transfer tools.\n
  • Sanitization: The skill lacks explicit sanitization or validation logic for the content of imported memory entries.
Audit Metadata
Risk Level
SAFE
Analyzed
May 24, 2026, 10:22 AM
Security Audit — agent-trust-hub — rvf-manage