telemetry-inspect
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses sensitive application-specific state files and telemetry logs located in the user's home directory, specifically under
~/.claude/analytics/and~/.local/state/orchestkit/. These files may contain session metadata, hook timing data, and coordination event streams. - [COMMAND_EXECUTION]: The skill instructs the agent to run local diagnostic scripts found within the project's source tree (
src/hooks/scripts/validate-registry.mjsandsrc/hooks/scripts/fired-census.mjs) using Node.js to validate the telemetry registry. - [COMMAND_EXECUTION]: The skill utilizes the
sqlite3command-line utility to perform read-only SELECT queries on thesessions.dbdatabase to report on live session counts and skill invocations.
Audit Metadata