vp-session-wrapup
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a set of instructions for session summarization and artifact cleanup with a focus on safety. It includes specific guidelines to avoid the accidental deletion of important work and explicitly instructs the agent to defer the handling of credential files to the user.
- [DATA_EXPOSURE]: Although the skill is designed to identify "secret material" created during a session, its instructions prioritize reporting and unstaging over deletion, and it mandates leaving credential files to the user's discretion. No patterns of data exfiltration or unauthorized access were found.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on session history to generate summaries, which is its primary function. It defines clear boundaries, such as identifying items created specifically by the current session, to mitigate risks associated with processing potentially untrusted data from the session transcript.
Audit Metadata