session-to-skill
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes vendor-specific CLI commands (
entire search,entire session current,entire checkpoint explain) to retrieve session history and metadata. These are used for the primary purpose of the skill and are constrained to the user's own data. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads session metadata and transcripts stored locally in
.git/entire-sessions/. It includes explicit instructions (Rule 6) to not include secrets, private credentials, or raw logs in the generated output, mitigating risks of data exposure. - [REMOTE_CODE_EXECUTION]: The skill invokes the
entireCLI. As 'entireio' is the verified author of the skill, these commands are considered legitimate vendor functionality for managing their own platform's session data. - [DYNAMIC_EXECUTION]: The skill provides a workflow for creating and writing a new
SKILL.mdfile. This involves script/instruction generation, but it requires explicit user approval for the destination path and overwriting, which is a standard safety measure for developer tools.
Audit Metadata