session-reset
Audited by Socket on Feb 28, 2026
1 alert found:
SecurityThis SKILL.md describes a session-reset workflow that is coherent with its stated purpose: saving a small ephemeral session summary (PROMPT.md), optionally committing safe work, tearing down an active agent team, and guiding the user to /clear and restore. I found no download-execute supply-chain patterns, no obfuscated or hidden code, and no direct credential harvesting instructions. The main risks are operational: it performs potentially destructive or sensitive actions (git commit/push, sending shutdown_request, TeamDelete) and reads team configuration files which may be sensitive. These actions are plausible for a session-management skill but require strong interactive user confirmations and appropriate permission controls. Overall this appears functionally appropriate for its purpose, but it is moderately privileged and should only be allowed when users explicitly approve each impactful operation.