recover-deleted-claude-conversation
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DATA_EXPOSURE]: The skill accesses application-specific cache directories, such as
~/Library/Application Support/Claude/Cache/Cache_Data/, to retrieve deleted data. This access is inherent to the recovery functionality. - [EXTERNAL_DOWNLOADS]: Fetches the
ccl_chromium_readerlibrary from the official repository of CCL Solutions Group on GitHub and installs thebrotliandzstandardpackages viauv. - [COMMAND_EXECUTION]: Uses shell commands to identify running processes (
ps aux), copy cache files for snapshotting, and manage virtual environments. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data sourced from the local application cache. Ingestion points: Chromium blockfiles (
data_*,f_*) are read from the local Claude application cache directory. Boundary markers: None present; the skill performs direct extraction and searching of cache contents. Capability inventory: Includes shell command execution, file system modification, and network access for downloading dependencies. Sanitization: No explicit sanitization or filtering is applied to the data retrieved from the cache during the search process.
Audit Metadata