analyze-copilot-sessions
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Executes several local Python scripts to process session data and perform history maintenance.
extract_session_metrics.py: Aggregates usage data from VS Code debug logs, focusing on model usage and token counts.analyze_session_metrics.py: Performs statistical comparisons across multiple session runs to identify performance bottlenecks.prune_chat_sessions.py: Automates the deletion of local session files and the removal of metadata from SQLite databases based on age.- [DATA_EXFILTRATION]: Accesses sensitive local application directories and state databases required for session management.
- Accesses VS Code workspace storage paths (e.g.,
APPDATA,~/.config, orLibrary/Application Support) to retrieve debug logs and application metadata. - Reads and modifies internal SQLite databases, specifically
state.vscdb(VS Code state) andsession-store.db(Copilot history), to manage session indices. - All data processing and file management operations are restricted to the local environment; no network exfiltration patterns or unauthorized data transmission behaviors were detected.
- The skill implements explicit privacy safeguards by stripping prompts, responses, and absolute file paths from the generated metrics and analysis outputs.
Audit Metadata