agent-session-monitor
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
main.pyutilizesos.systemto clear the terminal screen during real-time monitoring. This implementation uses static strings ('clear' or 'cls') and is a benign use of system commands for user interface management. - [INDIRECT_PROMPT_INJECTION]: The skill processes Higress access logs which contain untrusted conversation data. This creates an indirect injection surface; however, the skill effectively mitigates this risk by implementing a dedicated
escape_htmlfunction inscripts/webserver.pyto sanitize all content before it is rendered in the web dashboard. - [SAFE]: The skill demonstrates a high security posture by relying exclusively on the Python standard library, avoiding external package dependencies, and maintaining all session data within the local file system. All external resource references are consistent with the infrastructure of the author, 'higress-group'.
Audit Metadata