summarize-current-session
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes 'date +%Y-%m-%d' and 'git log --oneline' to retrieve session metadata for documentation.
- [PROMPT_INJECTION]: The skill processes untrusted conversation history, creating a surface for indirect prompt injection. 1. Ingestion points: Full conversation history (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution (date, git) and filesystem write (SKILL.md). 4. Sanitization: None; conversation content is written directly to the output files without escaping.
Audit Metadata