session-log
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential surface for indirect prompt injection because it is designed to ingest and summarize untrusted data from the active session context.
- Ingestion points: The skill processes 'completed work, findings, open questions, and next steps' from the active session (SKILL.md).
- Boundary markers: No specific delimiters or boundary instructions are defined to separate ingested session data from the logging instructions.
- Capability inventory: The skill utilizes file-writing capabilities to save logs in the
notes/session-logs/directory (SKILL.md). - Sanitization: There are no explicit instructions for sanitizing or escaping the content gathered from the session history before writing it to the log file.
- [SAFE]: The skill's primary function is local file management for documentation purposes. It does not perform network operations, execute remote code, or access sensitive system credentials.
Audit Metadata