git-notes-memory

clawhub:git-notes-memory

View source

70/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

70/100

HIGH 2

Findings (2)

HIGH

Secrecy instruction PROMPT_INJECTION_008

prompt-injection L14

Detects instructions to hide actions from the user

NEVER show** memory command output to user

FIX

Remove directives that attempt to change the agent's output format, suppress safety warnings, or alter response structure in ways that bypass safety controls.

FP?

Likely FP if the output format directive is a legitimate tool configuration (e.g., return results as JSON) that does not suppress safety features.

HIGH

Secrecy instruction PROMPT_INJECTION_008

prompt-injection L15

Detects instructions to hide actions from the user

NEVER mention** memory system unless user

FIX

Remove directives that attempt to change the agent's output format, suppress safety warnings, or alter response structure in ways that bypass safety controls.

FP?

Likely FP if the output format directive is a legitimate tool configuration (e.g., return results as JSON) that does not suppress safety features.