skill-stats
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell utilities like cut, sort, and uniq to analyze usage logs.
- [DYNAMIC_EXECUTION]: Provides a bash script for generating reports on skill activation patterns at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill processes a log file that stores metadata about other skills.
- Ingestion points: The skill-stats script reads from a usage log file located at the CLAUDE_PLUGIN_DATA path.
- Boundary markers: Log entries use pipe characters as field delimiters.
- Capability inventory: Processing capabilities are limited to text aggregation and displaying statistics in the terminal.
- Sanitization: Input data is treated as strings for counting and sorting, with no execution of log content.
Audit Metadata