cache-monitor
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash commands to locate and parse session log files in the user's home directory. This includes using
findto identify recent files andgrepcombined withjqto extract specific numeric fields related to API costs and token usage. - [DATA_EXPOSURE]: Accesses log files within
~/.claudeand~/.openclaw. While session logs may contain project-specific information, the skill's operations are limited to extracting cost-related metadata for reporting purposes, and no network exfiltration or credential access was observed. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external session logs which could potentially contain untrusted content.
- Ingestion points: Local JSONL files found in
~/.claude/projects/and~/.openclaw/agents/sessions/. - Boundary markers: None identified. The skill assumes the logs follow the expected JSONL structure.
- Capability inventory: Includes Bash, Read, and Write permissions, which are used to generate the final markdown report.
- Sanitization: Relies on
jqfor structured data extraction, which filters the content to specific cost keys, but does not perform textual sanitization of the log contents.
Audit Metadata