session-logs

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use several Unix command-line tools to process data.
  • Tools used: jq, rg (ripgrep), awk, ls, head, tail, sort, and uniq.
  • Purpose: These tools are used to filter, sort, and search through JSONL session logs to extract metadata, message content, and cost information.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes past conversation history which may contain untrusted data.
  • Ingestion points: Reads conversation logs from ~/.clawdbot/agents/<agentId>/sessions/*.jsonl in the SKILL.md instructions.
  • Boundary markers: Absent. The skill does not define specific delimiters or instructions to ignore embedded commands when parsing logs.
  • Capability inventory: The agent has access to text processing and search tools (jq, rg, awk, etc.) for local files.
  • Sanitization: No sanitization or escaping of log content is performed before the agent processes or interprets the results.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:45 PM
Security Audit — agent-trust-hub — session-logs