session-to-skill
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell utilities such as
grep,cut,head, andtailto parse and extract relevant information from local session transcripts and metadata files. - [COMMAND_EXECUTION]: It invokes the vendor's
entireCLI tool to search session history, access current session data, and retrieve detailed checkpoint explanations. - [EXTERNAL_DOWNLOADS]: The
entire searchcommand is used to query the vendor's remote index for relevant workflow patterns based on user terms. - [PROMPT_INJECTION]: The skill processes potentially untrusted data from session transcripts and metadata files stored in the
.git/entire-sessions/directory. - Ingestion points: Content is ingested from local JSON session files and outputs from the
entire explaincommand. - Boundary markers: No specific boundary markers or 'ignore' instructions are defined for the transcript processing steps.
- Capability inventory: The skill can execute shell commands and write new
SKILL.mdfiles to the filesystem. - Sanitization: The instructions include a specific rule to prevent the inclusion of secrets, credentials, or raw logs in the final generated output.
Audit Metadata