s-compact
Warn
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONPERSISTENCEDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to inspect the host system and manage files. It specifically uses
pgrep -flandlsof -ti :PORTto identify and manage running processes spawned during the session. - [DATA_EXFILTRATION]: The skill automatically copies the generated session handoff (which may contain sensitive technical details, findings, and code snippets) to the macOS clipboard using
pbcopy. While intended for user convenience, this moves data into a shared system buffer without explicit user confirmation of the content. - [PERSISTENCE]: The skill saves session state to
~/.claude/super-token-saver-data/<project>/handoff.md. This is a persistence mechanism designed to allow future AI sessions to automatically load data from a hidden directory in the user's home folder. - [DYNAMIC_EXECUTION]: The skill generates a shell script at runtime using a heredoc (
cat > /tmp/cc-handoff.md <<'HANDOFF') and then executes file system operations (mkdir,cp,cat) to move this generated content into the persistence directory.
Audit Metadata