memory-context-poisoning-reviewer

What problem does it solve?

This Skill reviews an agent's persistent memory and stored context to find poisoning risks that survive beyond a single conversation and later steer behavior with untrusted or malicious content.

Core Features & Use Cases

• Memory surface mapping: Identifies every long-term store, summary flow, preference cache, and recalled context that persists across sessions.
• Write-path review: Checks whether auto-summarization, "remember this" flows, tool outputs, or peer-agent content can be persisted without validation.
• Recall safety review: Verifies that recalled memory is treated as data with provenance and trust markers, not as instructions or policy.
• Scope and lifecycle controls: Evaluates tenant, user, and session scoping, plus TTL, purge, rollback, and derived-state cleanup.
• Use case: Review an assistant that stores session summaries in a memory database and confirm that attacker-planted content cannot persist, cross tenants, or reappear as trusted truth later.

Quick Start

Review the agent's persistent memory design for poisoning paths, scoping failures, recall trust issues, and purge rollback gaps.