agent-memory-mcp
Warn
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to clone a repository from
https://github.com/webzler/agentMemory.gitto initialize functionality. This introduces code from a third-party source into the agent's environment.- [REMOTE_CODE_EXECUTION]: The setup process involves runningnpm installandnpm run compileon the cloned repository. This leads to the execution of code and scripts defined by the external repository during the build and installation phases.- [COMMAND_EXECUTION]: The skill relies on several shell commands for its setup and operation, includinggit clone,npm install, andnpm run start-server. These commands execute logic provided by the external project files.- [INDIRECT_PROMPT_INJECTION]: The skill acts as a memory management system that reads and searches content viamemory_readandmemory_search. If the stored memory content includes adversarial instructions, the agent could potentially process and follow them. - Ingestion points: External data is ingested through the
memory_readandmemory_searchtools defined inSKILL.md. - Boundary markers: None identified in the skill instructions to delimit stored content from system instructions.
- Capability inventory: The skill has the capability to execute shell commands as described in the
SetupandDashboardsections ofSKILL.md. - Sanitization: There is no evidence of sanitization or filtering for the content retrieved from the memory bank.
Audit Metadata