session-recorder
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements its logic using several Bash scripts to handle session initialization, recording of interactions via platform hooks, and finalization of log files.- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to the ingestion of tool outputs. 1. Ingestion points: hooks/record_tool_result.sh reads tool output from stdin. 2. Boundary markers: Data is stored in structured JSON fields. 3. Capability inventory: The skill utilizes Bash for all operations. 4. Sanitization: Inputs are escaped through jq to ensure valid JSON storage.- [SAFE]: The skill functions as a local utility and does not exhibit malicious patterns such as unauthorized network access, persistence, or privilege escalation.
Audit Metadata