context-review-sessions
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git rev-parse --show-toplevelusing a subprocess to determine the project's root directory. This is implemented safely using a list of arguments rather than a shell string, effectively preventing command injection risks. - [INDIRECT_PROMPT_INJECTION]: The script processes a local CSV file (
sessions.log) to manage session metadata. It includes robust schema validation and date parsing to ensure that the data read from the file matches expected formats, mitigating risks associated with malformed or malicious local data.
Audit Metadata