meticulous-use-session-data
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and analyze local session records and network logs generated by the Meticulous tool to help developers write or verify tests. Because these logs represent recorded application states, web requests, and user events, they constitute an untrusted data ingestion point where adversarial instructions could be embedded.
- Ingestion points: The agent is directed to read files such as
manifest.json,user-events.json, andnetwork-requests/summary.jsoninside the.meticulous/sessions/directory. - Boundary markers: There are no explicit boundaries or isolation instructions separating the log content from the agent's main prompt context.
- Capability inventory: The skill enables file reading and tool execution (
meticulous local relevant-sessions,get_session_data,submit_feedback) but does not pass untrusted data directly to a command shell or code evaluator. - Sanitization: No input sanitization or filtering is applied to the log content before the agent processes it.
Audit Metadata