pi-session-search
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a utility designed for local session log archaeology. It enables the agent to search through its own history stored in the
~/.pi/agent/sessionsdirectory using a provided Python script. The script is self-contained, uses only standard libraries, and does not perform any network operations, file modifications, or external code execution.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from past session logs, which provides an ingestion point for previously encountered content.\n - Ingestion points: The skill reads
*.jsonlfiles from the~/.pi/agent/sessionsdirectory viascripts/pi-session-search.pyand standard shell utilities likegrep.\n - Boundary markers: The output generated by the search script includes role markers (e.g.,
[assistant],[user]) and timestamps to help delineate session events and maintain context boundaries.\n - Capability inventory: The script performs file reading and JSON parsing. No capabilities for network access, file writing, or dynamic code execution (such as
evalorexec) are present in the code.\n - Sanitization: Content snippets are truncated to 300 characters, and the overall script output is capped at 40KB to protect the agent from potential context window exhaustion or denial-of-service via large log files.
Audit Metadata