ctx-agent-history-search
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell commands to interact with the ctx CLI binary.\n
- Evidence: Usage of ctx status, ctx search, ctx show, and ctx sql for history retrieval and analysis.\n
- Evidence: Ability to write session transcripts to local file paths using the --out flag.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources for tool setup.\n
- Evidence: Installation instructions point to https://ctx.rs/install.\n- [REMOTE_CODE_EXECUTION]: A remote script is executed to install necessary dependencies.\n
- Evidence: The command curl -fsSL https://ctx.rs/install | sh pipes remote content directly into the shell. This is a vendor-provided installation script.\n- [PROMPT_INJECTION]: The skill manages a surface for indirect prompt injection via the processing of historical agent transcripts.\n
- Evidence: Ingestion points include searching and showing session/event history.\n
- Evidence: Boundary markers and safety rules are included to prevent raw transcript inclusion and leakage of secrets.
Audit Metadata