handoff
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection attack surface as it ingests untrusted conversation data to generate instructions (handoff summaries and suggested skills) for subsequent agent sessions.
- Ingestion points: Processes the current conversation history as the source for the handoff document.
- Boundary markers: Absent; there are no specific markers used to distinguish user-provided content from the summary instructions.
- Capability inventory: Writes generated content to the OS temporary directory (SKILL.md).
- Sanitization: Includes a safety-oriented instruction to redact sensitive information such as API keys, passwords, and PII, which helps mitigate data exposure but does not prevent logic-based injection.
Audit Metadata