analyze-copilot-sessions
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external debug log data which presents a potential injection surface.
- Ingestion points:
extract_session_metrics.pyandprune_chat_sessions.pyread.jsonllog files and SQLite databases from the local VS CodeworkspaceStoragedirectory. - Boundary markers: The
SKILL.mdinstructions explicitly direct the agent to treat log content as data and avoid executing it as instructions. - Capability inventory: The skill's scripts are capable of reading, writing, and deleting files within the workspace storage and modifying local session databases.
- Sanitization: The scripts use standard JSON and SQLite libraries for data extraction and aggregation, focusing on numeric metrics rather than text execution.
Audit Metadata