session-trends
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python snippets and shell commands (including
rg,sort, anduniq) to aggregate metrics from.claude/session-metrics/metrics.jsonl. It also invokes a Python script from a relative sibling directory:../session-scan/references/compute-metrics.py.\n- [PROMPT_INJECTION]: The skill identifies ingestion points for potentially untrusted data, qualifying as an indirect prompt injection surface. [Ingestion points]: The skill reads.claude/session-metrics/metrics.jsonland user-specified files via the--compareflag. [Boundary markers]: Instructions explicitly require the agent to read comparison files separately and evaluate them 'cautiously' against aggregates. [Capability inventory]: Subprocess execution for shell commands and Python-based data processing. [Sanitization]: Content is parsed via standard JSON libraries rather than being executed as instructions.
Audit Metadata