telemetry-inspect

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard diagnostic commands like stat, wc, find, and tail to inspect telemetry file metadata. It also uses sqlite3 to perform read-only queries on the sessions.db database for live session status. These operations are restricted to project-specific paths and are consistent with the skill's stated diagnostic purpose.
  • [DATA_EXFILTRATION]: The skill accesses project-specific telemetry data and application state located in .claude/ and ~/.local/state/orchestkit/. These paths are relevant to monitoring OrchestKit telemetry, and there is no evidence of data being transmitted to external endpoints or any network-capable tools being used for exfiltration.
  • [PROMPT_INJECTION]: The skill's instructions focus strictly on data reporting and health checks. There are no attempts to override agent behavior, bypass safety guidelines, or extract system prompts.
  • [EXTERNAL_DOWNLOADS]: No external packages or remote scripts are downloaded or executed. The skill relies on local inventory files and established system tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 06:43 AM
Security Audit — agent-trust-hub — telemetry-inspect