Prompt Log
v0.1.0Extract conversation transcripts from AI coding session logs (Clawdbot, Claude Code, Codex). Use when asked to export prompt history, session logs, or transcripts from .jsonl session files.
⭐ 2· 3.3k·12 current·14 all-time
by@thesash
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name and description (extract transcripts from .jsonl session logs) match the instructions' stated goal. However, the SKILL.md repeatedly tells you to run a 'bundled script' at scripts/extract.sh, yet this skill package contains no code files or scripts. The skill metadata also omits the runtime dependency 'jq' declared in SKILL.md. These inconsistencies mean what the skill claims to provide is not actually present in the package.
Instruction Scope
The instructions are narrowly scoped to reading local .jsonl session files and writing a markdown transcript (expected for the stated purpose). But because the instructions tell the agent to execute a script that isn't included, it's unclear what that script would do. The examples reference reading files in user home dirs (e.g., ~/.codex/, ~/.claude/, ~/.clawdbot/), which is expected for a transcript tool but raises the usual sensitivity note: session logs often contain sensitive prompts/keys and should be inspected before being processed or uploaded.
Install Mechanism
This is an instruction-only skill with no install spec or code files, which is low risk in principle. The problem is the documentation claims a bundled script but none is present — so the package provides no executable to perform the stated task. No on-package install means nothing will be written to disk by the skill itself, but you should not execute or fetch external scripts unless you can review them first.
Credentials
The skill declares no required environment variables or credentials (reasonable). SKILL.md does, however, list runtime dependencies ('jq' and optionally 'gdate') that are not reflected in the declared requirements — a minor but meaningful mismatch. There are no demands for unrelated credentials or config paths.
Persistence & Privilege
No special persistence is requested (always=false). The skill does not request to modify other skills or system settings and does not claim to store credentials or enable itself automatically.
What to consider before installing
Do not run any scripts or commands referenced by this skill until you can inspect them. The SKILL.md refers to scripts/extract.sh, but the package contains no code — ask the publisher for the script source or a vetted install method. Confirm 'jq' (and on macOS 'gdate' or compatible 'date') are available before running any extraction. Be aware that the examples point to reading session files in your home directory; those logs often contain sensitive prompts or secrets, so process them only in a controlled environment and avoid uploading them to untrusted services. If you proceed, request the extract.sh source, review it for network calls or data exfiltration, or run it in an isolated container or VM.Like a lobster shell, security has layers — review code before you run it.
latestvk97e796xgw3cebf56x7ta77fed7z572k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
