claude-code-sessions
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses Claude Code session records stored locally in
~/.claude/projects/. These files contain interaction history, including messages, tool calls, and token usage. This access is the primary function of the skill for the purpose of session management. No network activity targeting external domains was observed; the web dashboard is hosted locally onlocalhost:3000. - [COMMAND_EXECUTION]: The skill invokes the
bunruntime to execute its own TypeScript modules for data parsing and search operations, as well as to launch the web-based user interface. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads historical session data from
JSONLfiles in~/.claude/projects/. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands were identified in the provided documentation.
- Capability inventory: Includes file read access, file deletion (
/session-delete), and local server hosting (ui/server.ts). - Sanitization: The documentation does not specify sanitization or validation methods for the processed historical interaction data.
Audit Metadata