dp-session-forensics
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs forensic analysis on local application data as described in its documentation. Database interactions with the local
opencode.dbare strictly read-only and use parameterized queries (?placeholders) to ensure data integrity and prevent SQL injection. - [SAFE]: Forensic data is exported only to the local file system (stdout or user-defined directories). There are no network operations or external data exfiltration patterns detected.
- [SAFE]: The HTML export functionality correctly utilizes the
html.escapemodule to sanitize forensic data, mitigating potential Cross-Site Scripting (XSS) risks when viewing agent reasoning or message history in a browser. - [SAFE]: All dependencies are restricted to the Python standard library (
sqlite3,json,argparse,os, etc.), and the skill does not attempt to download or execute remote code.
Audit Metadata