wrap-up-session
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Git commands (status, diff, log, commit, push, stash, worktree) and identifies project-specific deployment or synchronization commands from the local
CLAUDE.mdfile to run as part of the session wrap-up. - [PROMPT_INJECTION]: The skill ingests data from local project files (
CLAUDE.md) to determine next steps and deployment actions, which represents a potential surface for indirect prompt injection. - Ingestion points: Reads project-specific instructions and deployment commands from
CLAUDE.md(Step 0 and Step 4). - Boundary markers: Absent; the skill does not use specific markers to delimit untrusted data when processing the project file.
- Capability inventory: Git operations, file system writes (CLAUDE.md and session archives), and shell command execution.
- Sanitization: Absent; the skill assumes commands found in the local configuration file are valid and safe to execute.
Audit Metadata