telemetry-inspect

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [DATA_EXFILTRATION]: The skill accesses sensitive application-specific state files and telemetry logs located in the user's home directory, specifically under ~/.claude/analytics/ and ~/.local/state/orchestkit/. These files may contain session metadata, hook timing data, and coordination event streams.
  • [COMMAND_EXECUTION]: The skill instructs the agent to run local diagnostic scripts found within the project's source tree (src/hooks/scripts/validate-registry.mjs and src/hooks/scripts/fired-census.mjs) using Node.js to validate the telemetry registry.
  • [COMMAND_EXECUTION]: The skill utilizes the sqlite3 command-line utility to perform read-only SELECT queries on the sessions.db database to report on live session counts and skill invocations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 06:25 PM