session-debrief
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bunto execute a local TypeScript script (session-debrief.ts) via theAgenttool. This is the primary function of the skill for analyzing session logs. - [EXTERNAL_DOWNLOADS]: The skill references an external LLM endpoint and API key configuration via environment variables or a local configuration file (
~/.config/cc-skills/debrief.env). Since the source of the scripts is the vendor's own directory structure ($HOME/eon/cc-skills), these are considered internal tool operations. - [DATA_EXPOSURE]: The skill accesses Claude's local session history files located in
~/.claude/projects/. This access is necessary for its stated purpose of summarizing session history for the user.
Audit Metadata