handover-resume
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
handoverCLI and MCP interface to execute various state management commands, includinghandover whoami,handover search,handover show,handover pull, andhandover continue(SKILL.md). - [EXTERNAL_DOWNLOADS]: The skill retrieves project artifacts and revisions from the Handover vendor's service using the
handover pullcommand (SKILL.md). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external handover records which could be manipulated to contain malicious instructions.
- Ingestion points: External data is retrieved and processed through
handover.search,handover show, andhandover pull(SKILL.md). - Boundary markers: No explicit delimiters are specified to separate the external data from the agent's instructions.
- Capability inventory: The skill can write files to a local directory via
handover pulland publish new project revisions viahandover continue(SKILL.md). - Sanitization: The instructions do not require the agent to sanitize or validate the content of retrieved artifacts or revision notes before processing.
Audit Metadata