unified-memory
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
ecc-universalpackage from the NPM registry as a runtime prerequisite. - [COMMAND_EXECUTION]: The skill relies on several CLI commands (
ecc memory,ecc-memory-mcp,ecc-memory-vault) for its core operations, including searching, reading, and saving data to the local file system. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from a 'Memory Vault' which may contain untrusted content from previous sessions or other agents.
- Ingestion points: Data is ingested through
ecc memory searchandecc memory readcommands (and their MCP equivalentsmemory_searchandmemory_read) as documented inSKILL.md. - Boundary markers: The instructions in
SKILL.mdexplicitly advise the agent to treat recalled bodies as 'untrusted context' and never as 'executable instructions', providing a conceptual boundary. - Capability inventory: The skill allows for file system writes (
ecc memory save,ecc memory handoff) and diagnostic checks (ecc memory doctor) as described inSKILL.md. - Sanitization: The instructions state that the runtime rejects known secret shapes, but prompt-level sanitization of retrieved markdown documents is not explicitly defined beyond the instruction to verify claims against authoritative sources.
Audit Metadata