dp-session-forensics
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a legitimate developer utility for session forensics. It accesses a local SQLite database to retrieve conversation history, which is its documented primary purpose.
- [DATA_EXFILTRATION]: The script reads sensitive session data from a local database path (
C:/Users/DEEPEXI/AppData/Roaming/.../opencode.db). Analysis confirms that the script only performs local read operations and writes output to the terminal or local files. No network communication or exfiltration logic is present. - [INDIRECT_PROMPT_INJECTION]: The tool processes untrusted data retrieved from the session database. It correctly employs
html.escapeandjson.dumpswhen generating HTML and JSONL exports, ensuring that any malicious content within the logs is safely handled and does not lead to injection vulnerabilities in the output viewer.
Audit Metadata