session-state

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill manages session state transitions by executing a local script at ./scripts/session-state.sh using the Bash tool.
  • Evidence: The file references/state-transition.md provides instructions and examples for the agent to run this script with specific state and event arguments.
  • [SAFE]: The skill is designed for internal workflow orchestration and is explicitly prohibited from direct user interaction.
  • Evidence: The user-invocable: false flag in SKILL.md prevents users from triggering these transitions directly.
  • Evidence: All state storage operations are confined to the local .claude/state/ directory, with no external network requests or sensitive data access detected.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 05:15 PM
Security Audit — agent-trust-hub — session-state