fix-jsonl-surrogates
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a bundled Python script (
fix_surrogates.py) to perform maintenance on chat history files. The script performs local file system operations, including reading, writing, and creating backups (.bak) of files within the~/.claude/projects/directory. These actions are necessary for the skill's stated purpose of repairing encoding issues. - [SAFE]: The logic in the Python script is transparent and follows best practices for handling encoding errors (using
surrogateescapeandsurrogatepass). It does not use any dangerous functions likeeval()orexec(), nor does it perform any network operations. - [DATA_EXFILTRATION]: No network calls or data exfiltration patterns were detected. All processing is done locally on the user's machine.
- [PROMPT_INJECTION]: The instructions in the skill do not contain any patterns intended to bypass safety filters or override the agent's core behavioral constraints.
Audit Metadata