Habilidades chronicle-remote-summarizer
📦
chronicle-remote-summarizer
Revisão do conteúdo r1 Risco alto ⚙️ Comandos externos🌐 Acesso à rede📁 Acesso ao sistema de arquivos🔑 Variáveis de ambiente
Resumir Sessões Remotas do Chronicle
As sessões remotas do Chronicle podem ser difíceis de resumir quando a máquina de origem não tem acesso ao Gemini. Esta skill orienta a exportação, o resumo local e a importação estruturada de volta para o sistema de origem.
Suporta: Claude Codex Code(CC)
Pare e solicite confirmação antes de instalar.
Revise o plano e obtenha o consentimento explícito do usuário antes de alterar arquivos.
Instalar com meu Agente
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Solicitação do agente
Review the Skillstore skill "chronicle-remote-summarizer" from https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer.md and its manifest at https://skillstore.io/api/skills/chandlerhardy-chronicle-remote-summarizer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Recursos legíveis por agentes
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Testar
Usando "chronicle-remote-summarizer". A sessão 7 existe em um host FreeBSD sem acesso ao Gemini.
Resultado esperado:
O assistente confirma os detalhes do host, exporta a sessão, resume-a localmente e informa que o resumo foi importado de volta.
Usando "chronicle-remote-summarizer". O pipeline SSH de uma linha trava durante o resumo.
Resultado esperado:
O assistente muda para o fluxo de trabalho manual, cria arquivos intermediários revisáveis e importa o resumo após confirmação.
Usando "chronicle-remote-summarizer". Várias sessões remotas não têm resumos.
Resultado esperado:
O assistente confirma os IDs de destino, processa-os um por um e relata sucesso ou falha para cada sessão.
Auditoria de segurança
Risco altov8 • 06/07/2026 Abrir o relatório versionado
This Markdown skill is primarily a Chronicle remote summarization workflow, not executable source code. Most raw backtick detections are false positives, but confirmed risks remain around SSH command execution, secret configuration, hidden and temporary transcript files, stderr suppression, and remote overwrite behavior. No prompt injection attempt was found in the reviewed SKILL.md content.
1
Arquivos analisados
349
Linhas analisadas
51
Itens de revisão
0
Falsos positivos ignorados
Preocupações de segurança confirmadas (2)
Alto
Unvalidated Shell Command Construction
The skill tells the assistant to ask for hostname and Chronicle path, then construct and run shell commands. Without validation or quoting rules, user-supplied host, path, or session IDs could alter SSH command behavior.
The workflow explicitly asks for host and path values and then constructs commands. The file does not define validation, escaping, or confirmation requirements for those values.
Médio
Automatic Remote Summary Overwrite
The workflow states that import-and-summarize overwrites existing summaries by design and later instructs the assistant to run commands. A wrong session ID or host could replace existing remote summaries.
The overwrite behavior is stated directly, and the assistant workflow includes running the command. The main uncertainty is whether the underlying Chronicle command prompts before overwrite.
Itens de revisão de capacidade (51)
Estas são capacidades locais reais que podem ser esperadas para esta habilidade, portanto exigem revisão, mas não são contabilizadas como comportamento malicioso confirmado.
Alto
Ruby/shell backtick execution
- Gemini API key configured on local machine (`chronicle config ai.gemini_api_key YOUR_KEY`)
This command configures a Gemini API key, so it may expose a secret through shell history or Chronicle configuration. The command is part of the documented setup flow.
Alto
Ruby/shell backtick execution
```bash
This line starts a full SSH pipeline that exports remote session data, summarizes it locally, filters output, and imports results back. It performs remote command execution and data transfer.
Alto
Ruby/shell backtick execution
```bash
The manual SSH pipeline interpolates remote host and session values into shell commands. Without validation, it can run unintended remote commands or transfer the wrong session data.
Alto
Ruby/shell backtick execution
```bash
The example runs the same SSH export, local summarize, and remote import pipeline. It is a real command workflow, not just an inert reference.
Alto
Ruby/shell backtick execution
```bash
This command configures a Gemini API key placeholder and may encourage entering secrets at the shell. Secret setup should avoid history and logs.
Alto
Ruby/shell backtick execution
```bash
This example runs a hardcoded SSH export, local summarization, output filtering, and remote import pipeline. It transfers session data and modifies remote state.
Alto
Ruby/shell backtick execution
```bash
The batch workflow runs SSH commands in a shell loop and pipes each session into summarization and remote import. Batch execution increases the impact of wrong IDs or host values.
Alto
Hidden file in home directory
- Stores transcript in `~/.ai-session/sessions/session_-3.cleaned`
The documented Chronicle workflow stores transcript data under a hidden home-directory path. If cleanup fails, sensitive session text can remain in a less visible location.
Alto
Hidden file access
- Stores transcript in `~/.ai-session/sessions/session_-3.cleaned`
The hidden Chronicle session path stores transcript content during import and summarization. That is real hidden-file access to potentially sensitive data.
Alto
Generic API/secret keys
- Gemini API key configured on local machine (`chronicle config ai.gemini_api_key YOUR_KEY`)
The skill tells users to configure a Gemini API key through Chronicle commands. API keys are secrets and may be exposed through shell history, logs, or local config if handled casually.
Alto
Generic API/secret keys
chronicle config ai.gemini_api_key YOUR_API_KEY_HERE
The skill tells users to configure a Gemini API key through Chronicle commands. API keys are secrets and may be exposed through shell history, logs, or local config if handled casually.
Médio
Ruby/shell backtick execution
Chronicle provides `import-and-summarize --quiet` which:
The skill centers on invoking the Chronicle summarization subcommand, which processes session data and calls Gemini. It is intended command execution and should be reviewed before automatic use.
Médio
Ruby/shell backtick execution
```bash
The bash block writes remote host and executable path settings and lists configuration with grep. It is intended local command execution against Chronicle config.
Médio
Ruby/shell backtick execution
**Note:** The `grep -A 999999 '^{$'` filters out Google library warnings that can leak through even
The grep filter is part of the documented pipeline and discards output before import. This can hide unexpected warnings or malformed output in a data-transfer workflow.
Médio
Ruby/shell backtick execution
```bash
This command exports a remote Chronicle session over SSH into a local file. It handles potentially sensitive session data and should not run without confirmation.
Médio
Ruby/shell backtick execution
```bash
The example exports a specific remote session to a local temporary file. It is an executable SSH command that can expose session content locally.
Médio
Ruby/shell backtick execution
```bash
This command pipes a local session export into Chronicle summarization and writes the summary to disk. It processes potentially sensitive transcript data.
Médio
Ruby/shell backtick execution
```bash
The example runs local Chronicle summarization on a temporary session export. It is intended command execution over sensitive session content.
Médio
Ruby/shell backtick execution
```bash
This command pipes the generated summary into a remote import command over SSH. It can modify the original remote session record.
Médio
Ruby/shell backtick execution
```bash
The example imports a summary back into a remote Chronicle session over SSH. It can update remote data and should be confirmed.
Médio
Ruby/shell backtick execution
```bash
The troubleshooting block includes export, local summarization, and remote import commands. These are executable commands that transfer and modify session data.
Médio
Ruby/shell backtick execution
```bash
The command lists remote Chronicle sessions over SSH to check a session ID. It is scoped, but still reads remote system data.
Médio
Ruby/shell backtick execution
```bash
This command lists Chronicle configuration and filters remote system entries. It can reveal stored hostnames and paths from local config.
Médio
Ruby/shell backtick execution
- Read hostname: `chronicle config remote_systems.freebsd.hostname`
The skill instructs the assistant to read a stored remote hostname from Chronicle config. This can expose infrastructure details and influences later SSH commands.
Médio
Ruby/shell backtick execution
- Read chronicle path: `chronicle config remote_systems.freebsd.chronicle_path`
The skill instructs the assistant to read the stored remote Chronicle path. This configuration value is used to construct later SSH commands.
Médio
Ruby/shell backtick execution
1. Checks config: `chronicle config remote_systems.freebsd.hostname`
The example has the assistant read the remote hostname from configuration before running commands. It is scoped config access but still part of command construction.
Médio
Ruby/shell backtick execution
1. Checks config: `chronicle config --list | grep remote_systems`
The example checks remote system configuration with Chronicle and grep. It reads local configuration to decide how to construct remote commands.
Médio
Ruby/shell backtick execution
```bash
The inspect workflow exports remote session data, summarizes it locally, reads the summary file, and imports it back over SSH. It is an executable data-transfer workflow.
Médio
Ruby/shell backtick execution
```bash
The debug command runs remote export and local summarization without quiet mode. It still executes a pipeline over remote session data.
Médio
Temp directory access
ssh <remote-host> "chronicle export-session <id>" > /tmp/session_<id>.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
ssh freebsd "chronicle export-session 7" > /tmp/session_7.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/session_<id>.json | chronicle import-and-summarize --quiet 2>/dev/null > /tmp/summary.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/session_7.json | chronicle import-and-summarize --quiet 2>/dev/null > /tmp/summary.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
- Outputs summary JSON to `/tmp/summary.json`
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/summary.json | ssh <remote-host> "chronicle import-summary"
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/summary.json | ssh freebsd "chronicle import-summary"
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
ssh freebsd "chronicle export-session 7" > /tmp/session.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/session.json | chronicle import-and-summarize --quiet > /tmp/summary.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/summary.json | ssh freebsd "chronicle import-summary"
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
2. Exports to `/tmp/session_7.json`
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
3. Processes locally → `/tmp/summary.json`
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
chronicle import-and-summarize --quiet 2>/dev/null > /tmp/summary.json
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/summary.json | jq '.summary'
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Médio
Temp directory access
cat /tmp/summary.json | ssh freebsd "chronicle import-summary"
The workflow reads or writes session exports and summaries under /tmp using predictable filenames. These files may contain sensitive transcript data and can be exposed or overwritten on shared systems.
Baixo
Standard device file access
**Note:** The `grep -A 999999 '^{$'` filters out Google library warnings that can leak through even
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Baixo
Standard device file access
- `2>/dev/null` suppresses Google library warnings (harmless)
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Baixo
Standard device file access
cat /tmp/session_<id>.json | chronicle import-and-summarize --quiet 2>/dev/null > /tmp/summary.json
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Baixo
Standard device file access
cat /tmp/session_7.json | chronicle import-and-summarize --quiet 2>/dev/null > /tmp/summary.json
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Baixo
Standard device file access
- **Suppress stderr**: Add `2>/dev/null` to hide Google library warnings
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Baixo
Standard device file access
chronicle import-and-summarize --quiet 2>/dev/null | \
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Baixo
Standard device file access
chronicle import-and-summarize --quiet 2>/dev/null > /tmp/summary.json
The workflow suppresses stderr with /dev/null in command pipelines. The device file is standard, but hiding warnings or errors can make unsafe imports harder to detect.
Fatores de risco
⚙️ Comandos externos (80)
SKILL.md:17 SKILL.md:31 SKILL.md:32 SKILL.md:35 SKILL.md:44 SKILL.md:49-56 SKILL.md:56-62 SKILL.md:62-64 SKILL.md:64-69 SKILL.md:69-71 SKILL.md:71-74 SKILL.md:74-76 SKILL.md:76-78 SKILL.md:78 SKILL.md:86-90 SKILL.md:90-99 SKILL.md:99-101 SKILL.md:101-104 SKILL.md:104-106 SKILL.md:106-109 SKILL.md:109-111 SKILL.md:111-114 SKILL.md:114-116 SKILL.md:116-119 SKILL.md:119-122 SKILL.md:122-125 SKILL.md:125-127 SKILL.md:127-130 SKILL.md:130-132 SKILL.md:132-141 SKILL.md:141-145 SKILL.md:145 SKILL.md:146-147 SKILL.md:147-149 SKILL.md:149-153 SKILL.md:153-161 SKILL.md:161-163 SKILL.md:163-167 SKILL.md:167-170 SKILL.md:170-171 SKILL.md:171 SKILL.md:190-199 SKILL.md:199-203 SKILL.md:203-206 SKILL.md:206-208 SKILL.md:208-214 SKILL.md:214-217 SKILL.md:217-219 SKILL.md:219-223 SKILL.md:223-229 SKILL.md:229-230 SKILL.md:230-231 SKILL.md:231-242 SKILL.md:242-244 SKILL.md:244-246 SKILL.md:246-247 SKILL.md:247-248 SKILL.md:248-250 SKILL.md:250-267 SKILL.md:267-268 SKILL.md:268-271 SKILL.md:271-273 SKILL.md:273-277 SKILL.md:277-280 SKILL.md:280-282 SKILL.md:282-289 SKILL.md:289-290 SKILL.md:290-298 SKILL.md:298-309 SKILL.md:309-313 SKILL.md:313-323 SKILL.md:323-327 SKILL.md:327-329 SKILL.md:329-332 SKILL.md:332-334 SKILL.md:334 SKILL.md:338-339 SKILL.md:339-340 SKILL.md:340-341 SKILL.md:341-342
🌐 Acesso à rede (1)
📁 Acesso ao sistema de arquivos (30)
SKILL.md:146 SKILL.md:231 SKILL.md:52 SKILL.md:63 SKILL.md:146 SKILL.md:231 SKILL.md:272 SKILL.md:282 SKILL.md:78 SKILL.md:90 SKILL.md:110 SKILL.md:115 SKILL.md:230 SKILL.md:306 SKILL.md:316 SKILL.md:100 SKILL.md:105 SKILL.md:110 SKILL.md:115 SKILL.md:122 SKILL.md:126 SKILL.md:131 SKILL.md:192 SKILL.md:195 SKILL.md:198 SKILL.md:289 SKILL.md:290 SKILL.md:316 SKILL.md:319 SKILL.md:322
🔑 Variáveis de ambiente (2)
Auditado por: codex Ver histórico de auditoria →
Compartilhar e citar este relatório
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
Copiar link do relatório
https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/chandlerhardy-chronicle-remote-summarizer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Cartão incorporável
<iframe src="https://skillstore.io/embed/skills/chandlerhardy-chronicle-remote-summarizer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citações acadêmicas (APA · BibTeX · CFF)
Citação APA
ChandlerHardy. (2026). chronicle-remote-summarizer security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer/audits/8Citação BibTeX
@techreport{chandlerhardy-chandlerhardy-chronicle-remote-summarizer-2026,
author = {ChandlerHardy},
title = {chronicle-remote-summarizer security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "chronicle-remote-summarizer security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "ChandlerHardy"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/chandlerhardy-chronicle-remote-summarizer/audits/8"
identifiers:
- type: other
value: "skillstore:chandlerhardy-chronicle-remote-summarizer:audit:8"
description: "Skillstore immutable audit report identifier"
Pontuação do Skillstore
Por que esta pontuação Confiança das evidências: Médio 55
Arquitetura
85
Manutenibilidade
87
Conteúdo
70
Comunidade
83
Conformidade com a especificação
O que você pode criar
Resumir a partir de um host de desenvolvimento restrito
Mova uma sessão do Chronicle de uma máquina remota sem acesso ao Gemini para uma máquina local para resumo.
Recuperar quando pipes SSH falham
Use o fluxo de trabalho documentado em três etapas para inspecionar arquivos e concluir manualmente a transferência do resumo.
Processar várias sessões inacabadas
Adapte o fluxo de trabalho em lote para resumir vários IDs de sessão conhecidos depois de confirmar os destinos e os detalhes do host.
Teste estes prompts
Resumir Uma Sessão Remota
Resuma a sessão 7 do Chronicle do meu host FreeBSD. Peça-me os detalhes de conexão em falta antes de executar comandos.
Usar Configuração Remota Salva
Use a minha configuração salva do sistema remoto do Chronicle para resumir a sessão 12 e importar o resultado de volta para o host de origem.
Inspecionar Antes de Importar
Exporte e resuma a sessão remota 18 e depois mostre-me o resumo para revisão antes de importá-lo de volta.
Sessões Remotas em Lote
Encontre as sessões remotas que eu indicar, resuma cada uma localmente e confirme antes de sobrescrever quaisquer resumos remotos existentes.
Boas práticas
- Confirme o host remoto, o ID da sessão e o caminho do Chronicle antes de executar comandos SSH.
- Inspecione os resumos gerados antes de importá-los quando o conteúdo da sessão for sensível.
- Exclua arquivos temporários de sessão e resumo após a conclusão do fluxo de trabalho.
Evitar
- Não cole chaves de API em comandos que possam ser salvos no histórico do shell.
- Não execute importações em lote sem confirmar cada ID de sessão de destino.
- Não suprima erros ao solucionar problemas de importações ou resumos com falha.
Perguntas frequentes
O que esta skill resume?
Ela resume sessões do Chronicle exportadas de outro sistema e importa o resumo de volta para a sessão original.
Ela requer SSH?
Sim. Os fluxos de trabalho documentados pressupõem acesso SSH entre a máquina local e o host remoto do Chronicle.
Ela chama o Gemini?
Sim. A máquina local deve ter acesso à Gemini API configurado para o resumo do Chronicle.
Posso revisar o resumo primeiro?
Sim. O fluxo de trabalho manual permite inspecionar o resumo gerado antes de importá-lo de volta para o host remoto.
Ela pode processar várias sessões?
Sim, mas fluxos de trabalho em lote devem confirmar cada ID de sessão antes de importar resumos ou sobrescrever os existentes.
Ela é segura para sessões sensíveis?
Tenha cautela. Exportações e resumos de sessões podem conter dados sensíveis, especialmente quando armazenados em arquivos temporários.
Detalhes do desenvolvedor
Autor
ChandlerHardyLicença
MIT
Revisão da Skillstore
r1
Aviso de versão
O autor não declarou uma versão.
Repositório
https://github.com/ChandlerHardy/chronicle/tree/main/chronicle-skills/chronicle-remote-summarizerReferência
dd4a3ef9f20ddf38830950b4bb713df96b431fd6
Atualidade da manutenção
23/07/2026
Uso
8 downloads · 198 visualizações
Estrutura de arquivos
📄 SKILL.md