owner-goals
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The script
export_owner_prompts.pyreads sensitive interaction history from~/.claude/projectsand~/.codex/sessions. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted historical chat data through a subagent. Malicious instructions in past prompts could influence the goal-mapping process.
- Ingestion points: User interaction logs in JSONL format from Claude Code and Codex.
- Boundary markers: No specific delimiters or safety instructions are added to the aggregated prompts file.
- Capability inventory: The skill writes results to disk and updates the
claude-memwork state through a local worker API. - Sanitization: The tool strips specific memory tags but does not perform content-based filtering of the prompt text.
- [COMMAND_EXECUTION]: The
export_owner_prompts.pyscript executes localgitcommands viasubprocess.runto manage output directory visibility.
Audit Metadata