lore
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python's
subprocessmodule to perform local version control operations usinggitand to coordinate its internal scripts. These operations are implemented using secure list-based arguments, preventing shell injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from repository files to construct its memory entries, creating a potential surface for indirect prompt injection.
- Ingestion points:
lore initscans repository metadata and documentation files;lore syncprocesses code changes viagit diffoutput. - Boundary markers: The skill employs clear Markdown section headers (e.g.,
## Lore (auto-managed)) and horizontal rules to isolate AI-generated content from manual user notes. - Capability inventory: The agent can write to the
.lore/directory and update platform-specific instruction files likeCLAUDE.md. It executesgitCLI tools to retrieve project history. - Sanitization: The workflow is designed around user oversight; every proposed modification to the memory bank or platform mirrors must be explicitly confirmed by the user before being applied.
Audit Metadata