retro

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to analyze historical session data and suggest workflow improvements. No malicious patterns such as obfuscation, credential theft, or unauthorized persistence were found.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes session logs which may contain untrusted data from previous executions.
  • Ingestion points: Session logs located on the local machine (referenced in SKILL.md).
  • Boundary markers: None explicitly defined in the instructions to separate log data from instructions.
  • Capability inventory: No risky capabilities (subprocess, network, file-write) are present in the analyzed files.
  • Sanitization: No explicit sanitization or filtering of log content is mentioned. Due to the lack of dangerous capabilities, the risk of exploitation is negligible.
  • [COMMAND_EXECUTION]: While the skill mentions searching through session logs, it does not define or use any dangerous shell commands or subprocesses to do so; it relies on standard agent file-reading capabilities within its environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 11:06 PM
Security Audit — agent-trust-hub — retro