session-persist
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a session restoration mechanism that creates a surface for indirect prompt injection.
- Ingestion points: The
mcp__claude-flow__session_restoretool is used to load previously saved state and memory into the active agent context. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers to isolate restored content from current system instructions.
- Capability inventory: The skill environment has access to the
Bashtool, which allows for file system and network operations. - Sanitization: There is no mention of sanitizing or validating the contents of the restored session data before it is processed by the agent.
Audit Metadata