journal
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script via the command
python3 Skills/supermemory/scripts/memory.py self-profile(referenced inSKILL.md) to integrate with a memory management system. - [DATA_EXFILTRATION]: The skill transmits reflections to the user's phone number using the
send_sms_to_usertool (defined inSKILL.md). - [SAFE]: The skill processes data from previous runs to influence current behavior. Ingestion points: The skill reads
Persona/IDENTITY.md,Persona/INNER.md, and previous entries inPersona/Journal/(specified inSKILL.md). Boundary markers: None are used to delimit the content read from these files. Capability inventory: The skill can execute a local Python subprocess, write to files in thePersona/directory, and use thesend_sms_to_usertool (all defined inSKILL.md). Sanitization: No validation or escaping of the ingested file content is performed. - [SAFE]: File system access is scoped to the
Persona/directory as defined in the configuration section ofSKILL.md, covering files such asIDENTITY.mdandINNER.md.
Audit Metadata