agent-session-monitor

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script main.py utilizes os.system to clear the terminal screen during real-time monitoring. This implementation uses static strings ('clear' or 'cls') and is a benign use of system commands for user interface management.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes Higress access logs which contain untrusted conversation data. This creates an indirect injection surface; however, the skill effectively mitigates this risk by implementing a dedicated escape_html function in scripts/webserver.py to sanitize all content before it is rendered in the web dashboard.
  • [SAFE]: The skill demonstrates a high security posture by relying exclusively on the Python standard library, avoiding external package dependencies, and maintaining all session data within the local file system. All external resource references are consistent with the infrastructure of the author, 'higress-group'.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 09:04 AM