fix-stuck-session
Warn
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Uses forceful process termination commands, including
kill -9on macOS/Linux andStop-Process -Forceon Windows, to end orphaned application processes. - [COMMAND_EXECUTION]: Executes destructive filesystem operations such as
rm -rf(macOS) andRemove-Item -Recurse(Windows) to clear application cache and VM state directories. - [COMMAND_EXECUTION]: Generates and executes inline Python code via
python3 -cto programmatically update local session state files, involving the interpolation of file paths into the script. - [DATA_EXFILTRATION]: Accesses application-specific session directories and state files located in
~/Library/Application Support/Claude/, which contain organizational and user identifiers as well as session history.
Audit Metadata