ccs-align
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute
curlcommands against a local service at127.0.0.1to perform health checks and retrieve observation data. - [DYNAMIC_EXECUTION]: Utilizes a
node -escript snippet to dynamically resolve the worker port by reading local configuration from~/.claude-mem/settings.json. - [INDIRECT_PROMPT_INJECTION]: The skill processes observation data which represents an attack surface for indirect prompt injection.
- Ingestion points: Fetches data from the worker API using
search,timeline, andget_observationsendpoints described inSKILL.md. - Boundary markers: Uses the
formatCcsAlignLineutility which applies«…»fencing and a 500-character truncation limit to data before caching. - Capability inventory: Contains capabilities for atomic file writes to
middle.jsonl, management ofcursor.json, and conditional patching of local agent profile files. - Sanitization: Implements a shared formatter to strip tag framing and invisible characters from recalled text, and includes an 'exclude marks' system to purge specific records from the cache.
Audit Metadata