save-context
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's primary functionality is managing session state within the local environment, which is a standard workflow enhancement.- [INDIRECT_PROMPT_INJECTION]: The skill ingests historical session data and conversation trailers, creating an attack surface for indirect instruction injection.\n
- Ingestion points: The skill reads existing
CONTEXT-*-llm.mdfiles from the local filesystem and parses<!-- ckpt ... -->trailers from the current message transcript.\n - Boundary markers: The skill uses structured HTML comments and specific markdown section headers to delimit and organize processed data.\n
- Capability inventory: The skill is authorized to use
Bash,Read,Write, andEdittools for file management and execution.\n - Sanitization: The skill performs a mandatory secret scrubbing pass to identify and replace PII, API keys, and tokens with redacted placeholders before storage.- [COMMAND_EXECUTION]: The skill executes shell commands via the
Bashtool to list directories and archive files. Security is maintained through strict regex validation of thestreamargument (^[a-zA-Z0-9_-]{1,50}$), which prevents unauthorized command or path manipulation.
Audit Metadata