session-end
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various shell utilities like
git,jq,grep, andwcto inspect the project state and session history. It also performs standard file system operations includingmv,rm, andcatto archive session files. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes data from git logs and session history.
- Ingestion points: Files located at
.claude/sessions/.current-sessionand the output ofgit logcommands. - Boundary markers: The summary output is delimited using standard Markdown headings.
- Capability inventory: The skill uses file system manipulation and command-line data processing tools.
- Sanitization: Git log output and session file contents are processed and appended to archival files without specific character escaping or sanitization.
Audit Metadata