session-log
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to write session logs to a designated local directory ('notes/session-logs/'). This behavior is transparent and aligns with the skill's stated purpose.
- [PROMPT_INJECTION]: Analysis of the indirect prompt injection surface identifies that the skill ingests session history data to generate logs.
- Ingestion points: Session context (completed work, findings, open questions) entered into the agent context.
- Boundary markers: No specific delimiters are used to separate session data from instructions in the log generation process.
- Capability inventory: File-write operations limited to the 'notes/session-logs/' directory.
- Sanitization: No explicit sanitization or escaping of session data is mentioned.
- This surface is characteristic of logging utilities and does not indicate malicious intent.
- [EXTERNAL_DOWNLOADS]: No external resources, scripts, or packages are referenced or downloaded by this skill.
Audit Metadata