claude-cli-session

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Generates and executes shell commands for the claude CLI and ollama tools, utilizing the --permission-mode acceptEdits flag for automated file modifications.
  • [PROMPT_INJECTION]: The skill ingests user prompts and file-based session IDs for interpolation into shell commands, creating an indirect prompt injection surface.
  • Ingestion points: User task prompt input and the .claude-cli-session-id file.
  • Boundary markers: Command patterns use double quotes for variable wrapping.
  • Capability inventory: CLI execution with filesystem write permissions.
  • Sanitization: No explicit validation or escaping of user-provided strings before command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 09:01 AM