session-story
Warn
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill includes functionality to read sensitive local chat history from directories such as
~/.claude/projects/and~/.codex/sessions/usingscripts/harvest.py. While used for content extraction, these transcripts are highly sensitive and can contain private code, tokens, or credentials. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npx --yes hyperframes@0.8.71in its workflow, which automatically downloads and executes code from the npm registry. Additionally,scripts/setup.shperforms annpm ciinstall from a provided lockfile. - [DYNAMIC_EXECUTION]: The script
scripts/schedule.mjsuses thenode:vmmodule to dynamically load and execute the logic inassets/engine/scenes/compile.jswithin a sandboxed context. - [COMMAND_EXECUTION]: The skill frequently executes shell commands to coordinate the animation and rendering process, including calls to
ffmpeg,python3,node,npx, andswift(on macOS).
Audit Metadata