session-recap
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of an external Python package,
claude-session-index, which is used to index and search session history. - [INDIRECT_PROMPT_INJECTION]: The skill reads and summarizes historical session logs, which creates a potential surface for indirect prompt injection.
- Ingestion points: The agent uses the
sessions contextcommand as described inSKILL.mdto retrieve logs from past sessions for analysis. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between the content of the logs being analyzed and the agent's own task instructions.
- Capability inventory: Across all files, the skill utilizes
Bash,Read,Grep, andAskUserQuestiontools. - Sanitization: The skill does not implement any filtering or sanitization of the retrieved session logs before they are processed by the agent.
Audit Metadata