retro
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to analyze historical session data and suggest workflow improvements. No malicious patterns such as obfuscation, credential theft, or unauthorized persistence were found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes session logs which may contain untrusted data from previous executions.
- Ingestion points: Session logs located on the local machine (referenced in SKILL.md).
- Boundary markers: None explicitly defined in the instructions to separate log data from instructions.
- Capability inventory: No risky capabilities (subprocess, network, file-write) are present in the analyzed files.
- Sanitization: No explicit sanitization or filtering of log content is mentioned. Due to the lack of dangerous capabilities, the risk of exploitation is negligible.
- [COMMAND_EXECUTION]: While the skill mentions searching through session logs, it does not define or use any dangerous shell commands or subprocesses to do so; it relies on standard agent file-reading capabilities within its environment.
Audit Metadata