quarter-clone
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
findcommand to identify and execute a shell script (half-clone-conversation.sh) within the~/.claudedirectory. Executing scripts from the filesystem via dynamic path resolution is a high-capability operation. - [DATA_EXFILTRATION]: The skill reads from
~/.claude/history.jsonlto extract session IDs and project paths. While the data is processed locally, conversation history is considered sensitive, and accessing it constitutes a data exposure risk. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes data from external history files that may contain instructions.
- Ingestion points:
~/.claude/history.jsonl(referenced in SKILL.md) - Boundary markers: None provided; the skill relies on
tailandjqfor parsing. - Capability inventory: Includes execution of shell utilities (
tail,jq,find) and the execution of a bash script. - Sanitization: There is no evidence of sanitization or validation for the metadata extracted from the history file before it is used as command arguments.
Audit Metadata