coding-agent-sessions
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local
opencodecommand-line utility inscripts/agent_sessions/opencode.pyto fetch session listings and database paths. These calls are performed usingsubprocess.runwith hardcoded arguments and binary path resolution viashutil.which. The execution is restricted to the specific local tool and does not utilize a shell, mitigating typical injection risks. - [DATA_EXPOSURE]: The skill performs broad scanning of local application data directories (e.g.,
~/.claude,~/.codex,~/.opencode,~/.aside) and SQLite databases to reconstruct conversation histories. This access is the primary functionality of the skill, and the extracted data is returned to the agent context for processing without any external network exfiltration observed.
Audit Metadata