claude-cli-session
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Generates and executes shell commands for the
claudeCLI andollamatools, utilizing the--permission-mode acceptEditsflag for automated file modifications. - [PROMPT_INJECTION]: The skill ingests user prompts and file-based session IDs for interpolation into shell commands, creating an indirect prompt injection surface.
- Ingestion points: User task prompt input and the
.claude-cli-session-idfile. - Boundary markers: Command patterns use double quotes for variable wrapping.
- Capability inventory: CLI execution with filesystem write permissions.
- Sanitization: No explicit validation or escaping of user-provided strings before command execution.
Audit Metadata