session-deep-dive
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection because it ingests and analyzes untrusted session transcripts that may contain malicious instructions.
- Ingestion points: Full transcripts fetched via the 'ccrider' tool (SKILL.md, Step 3).
- Boundary markers: The workflow does not specify the use of delimiters or 'ignore' instructions when processing transcript content.
- Capability inventory: The skill has the ability to spawn subagents, read/write local files, and execute scripted updates.
- Sanitization: There is no evidence of sanitization or filtering of the transcript content before it is processed by subagents.
- [COMMAND_EXECUTION]: The skill uses a 'scripted update path' to modify the 'metrics.jsonl' file (SKILL.md, Step 7), which involves the execution of shell-level commands to perform file modifications.
Audit Metadata