telemetry-inspect
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool for executing shell commands such asfind,stat,wc,tail,grep, andsqlite3. These commands are used to inspect file metadata and retrieve status counts from the OrchestKit coordination database located in the user's local state directory (~/.local/state/orchestkit/). - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads and processes the content of various telemetry and log files. These files store historical agent decisions and outputs which could contain malicious instructions if the logged data originated from untrusted sources.
- Ingestion points: Reads files in the project's
.claude/subdirectories (telemetry, logs, state, and feedback). - Boundary markers: No specific delimiters or instructions are provided to the agent to treat log content as untrusted data rather than instructions.
- Capability inventory: The skill uses
Bash,Read,Grep, andGlobtools to analyze and report on file contents. - Sanitization: No sanitization or validation of log content is performed before the data is summarized for the health report.
Audit Metadata