session-closeout
Warn
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a sequence of shell commands (
cd,git add,git commit,git push) to automate the synchronization of the workspace. - [DATA_EXFILTRATION]: The
git pushcommand transmits the entire contents of the$VAULTdirectory to a remote server. This involves network transmission of local file data. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection by summarizing session activity into permanent files without sanitization or boundary markers.
- Ingestion points: Session history and decisions summarized in 'Daily Note' and 'log.md'.
- Boundary markers: None specified to isolate untrusted session data from the summarization logic.
- Capability inventory: Shell command execution (git), file writing (SKILL.md).
- Sanitization: None detected; content is appended directly to markdown files.
Audit Metadata