ctx-agent-history-search
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command to download and execute an installation script from
https://ctx.rs/installusingcurl -fsSL | sh. This is the vendor's official method for installing thectxCLI tool required for the skill. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
ctxCLI, includingctx status,ctx search,ctx show, andctx sql. These commands are used to interact with local agent history databases and are appropriate for the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the
ctxCLI installer from the vendor's website (ctx.rs). - [PROMPT_INJECTION]: The skill processes historical agent session data via
ctx searchandctx show, which creates an attack surface for indirect prompt injection from previous session content. The skill includes safety rules to mitigate risks, such as summarizing evidence rather than pasting raw transcripts and treating local history as private.
Audit Metadata