ccc-save-session
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the shell command
mkdir -p ~/.claude/sessionsto ensure a local directory exists for storing session data. This is a standard operation for local state persistence within the intended environment. - [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection as it summarizes session history and file contents that may contain untrusted data.
- Ingestion points: The skill reads conversation history and all files modified during the current session to generate its summary.
- Boundary markers: The generated Markdown summary does not use specific delimiters or instructions to treat summarized content as data rather than instructions when re-read by the agent in a future session.
- Capability inventory: The skill performs file system operations including directory creation and writing summary files to
~/.claude/sessions/. - Sanitization: No specific filtering or escaping is applied to the content gathered from the session before it is written to the summary file.
Audit Metadata