developer-growth-analysis
Warn
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses local Claude Code chat history files. These files contain sensitive information, including private source code, internal logic, and potentially hardcoded credentials or environment details from past sessions.
- [DATA_EXFILTRATION]: The skill transmits a summary of processed user data to Slack. This establishes a network data flow from the local environment to an external third-party messaging service.
- [PROMPT_INJECTION]: The skill processes untrusted chat history which may contain adversarial instructions from external sources previously encountered by the agent. 1. Ingestion points: Local chat history files managed by Claude Code. 2. Boundary markers: None identified; there are no instructions to the agent to ignore control characters or embedded commands within the history content. 3. Capability inventory: Local file system read access and network communication via Slack and HackerNews APIs. 4. Sanitization: The skill lacks explicit sanitization or filtering steps for the ingested chat history data.
Audit Metadata