stateless
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs shell scripts and common CLI utilities (like
find,wc,jq, andrm) to perform system diagnostics and manage local files. These commands are focused on the user's Claude Code configuration and memory storage locations. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile uses the!bashsyntax to runscope-report.shat load time. This diagnostic script is used to provide the agent with a snapshot of the current environment's memory settings and file existence without making any changes. - [DATA_EXPOSURE]: The skill interacts with configuration files such as
settings.jsonandsettings.local.jsonto read and update auto-memory preferences. It also enumerates the contents of the~/.claude/projects/directory to identify memory stores associated with various repositories. - [INDIRECT_PROMPT_INJECTION]: The skill identifies and processes markdown files generated by the agent (auto-memory) to provide status reports.
- Ingestion points: Reads
MEMORY.mdand other topic-specific markdown files in the memory directories. - Boundary markers: No explicit boundary markers are used when analyzing these files for line counts or existence.
- Capability inventory: Includes file system modification capabilities such as deletion (
rm), moving files (mv), and creating backups (cp). - Sanitization: The skill uses
jqfor structured JSON manipulation of settings files but does not sanitize the contents of markdown files read for diagnostic purposes.
Audit Metadata