introspect
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to read and analyze Claude Code session logs stored in
~/.claude/projects/. These logs contain sensitive data including conversation history, file contents, and internal reasoning. Accessing this data is documented as the core functionality of the skill, and the providedcc-sessionscript performs these operations locally without external data transmission. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes past session logs which may contain untrusted data from previous interactions.
- Ingestion points: Session logs in JSONL format are read from
~/.claude/projects/using thecc-sessionscript or manualjqrecipes. - Boundary markers: No explicit instruction delimiters or 'ignore' directives are used when the agent processes the extracted log content.
- Capability inventory: The agent has access to
Bash,Read,Grep, andGlobtools for file access and command execution. - Sanitization: The skill extracts and displays text from logs without sanitizing or escaping natural language content that could contain embedded instructions.
Audit Metadata