user-context
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- Local State Persistence: The skill manages user context by creating and reading from a dedicated state directory (
$CODEX_HOME/state/plugins/product-design/). This persistence is a documented feature designed to improve the agent's consistency across tasks by remembering product URLs, Figma files, and design preferences. - Data Security Guidelines: The instructions contain clear directives to the agent not to save secrets, credentials, API keys, or private customer data. This is a proactive measure to prevent accidental data exposure within the saved context files.
- Script-Based Context Management: The skill utilizes local Python scripts (
init_user_context.pyanduser_context_preflight.py) to automate the initialization and parsing of the context file. These scripts perform standard file system operations and data parsing using built-in Python libraries, confined to the plugin's workspace.
Audit Metadata