session-handoff
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to resolve the project's root directory (
git rev-parse --show-toplevel), inspect the repository status (git status --porcelain), and perform file system management tasks (mkdir,mv). - [CREDENTIALS_UNSAFE]: The document template prompts the agent to record environment details, including "secrets" and "env vars," in the generated markdown file. While the skill automatically adds the storage directory to the project's
.gitignorefile, storing credentials in plain-text markdown is a security concern. - [EXTERNAL_DOWNLOADS]: The documentation references installation via
npxfrom the author's (amit-t) repository. This is a vendor-managed resource used for skill distribution.
Audit Metadata