owner-goals

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DATA_EXFILTRATION]: The script export_owner_prompts.py reads sensitive interaction history from ~/.claude/projects and ~/.codex/sessions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted historical chat data through a subagent. Malicious instructions in past prompts could influence the goal-mapping process.
  • Ingestion points: User interaction logs in JSONL format from Claude Code and Codex.
  • Boundary markers: No specific delimiters or safety instructions are added to the aggregated prompts file.
  • Capability inventory: The skill writes results to disk and updates the claude-mem work state through a local worker API.
  • Sanitization: The tool strips specific memory tags but does not perform content-based filtering of the prompt text.
  • [COMMAND_EXECUTION]: The export_owner_prompts.py script executes local git commands via subprocess.run to manage output directory visibility.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 10:01 AM