pi-session-search

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a utility designed for local session log archaeology. It enables the agent to search through its own history stored in the ~/.pi/agent/sessions directory using a provided Python script. The script is self-contained, uses only standard libraries, and does not perform any network operations, file modifications, or external code execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from past session logs, which provides an ingestion point for previously encountered content.\n
  • Ingestion points: The skill reads *.jsonl files from the ~/.pi/agent/sessions directory via scripts/pi-session-search.py and standard shell utilities like grep.\n
  • Boundary markers: The output generated by the search script includes role markers (e.g., [assistant], [user]) and timestamps to help delineate session events and maintain context boundaries.\n
  • Capability inventory: The script performs file reading and JSON parsing. No capabilities for network access, file writing, or dynamic code execution (such as eval or exec) are present in the code.\n
  • Sanitization: Content snippets are truncated to 300 characters, and the overall script output is capped at 40KB to protect the agent from potential context window exhaustion or denial-of-service via large log files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:36 AM