handoff
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the standard system utility
mktempto create temporary handoff files. This is a standard and secure practice for managing transient state without cluttering the main filesystem or risking collisions. - [EXTERNAL_DOWNLOADS]: The skill and its references include attribution links to public GitHub repositories (specifically the upstream productivity skills by Matt Pocock). These are documented neutrally as sources of derivation and do not involve downloading or executing remote code.
- [DYNAMIC_EXECUTION]: The skill provides several utility scripts (
artifact_deduplicator.py,handoff_template_generator.py, andskill_recommender.py) to assist the agent. A review of these scripts confirms they are 'stdlib-only', meaning they rely exclusively on Python's built-in libraries (such asargparse,json,re, andtempfile) and do not perform unsafe operations likeeval()orexec()on untrusted input. - [DATA_EXPOSURE]: The skill reads conversation history and local project artifacts to generate summaries. It includes instructions to read a temporary file before writing to it, which serves as a safety check to ensure no existing data is overwritten.
Audit Metadata