atuin-history-cleanup
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts and the Atuin CLI to analyze and manage history entries. All subprocess invocations use argument lists, which prevents shell injection vulnerabilities. In
atuin_history_cleanup_transactional.py, the skill utilizes a pseudo-terminal (PTY) to automate entry deletion within the Atuin TUI, which is a legitimate application of this technique for its intended purpose.\n- [SAFE]: No malicious patterns such as prompt injection, unauthorized data exfiltration, or obfuscation were detected. The skill is designed with a strong focus on data integrity, performing audits in read-only mode and implementing a defensive cleanup workflow that includes snapshots and verification checks.
Audit Metadata