session-insights

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Executes shell commands (find, wc, stat) and Node.js one-liners to collect and parse local session data. These operations are restricted to the user's home directory and are necessary for the skill's primary function.
  • [PROMPT_INJECTION]: Potential for indirect prompt injection as the skill processes historical session logs. Ingestion points: reads files from ~/.claude/projects/ containing past interactions. Boundary markers: data is extracted using structured JSON parsing before being summarized by the LLM. Capability inventory: limited to local file metadata and JSON parsing via Node.js. Sanitization: uses specific JSON field extraction to filter content before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 04:51 AM