handoff
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local script
scripts/handoff_context.pyto collect repository status. This script invokes thegitcommand usingsubprocess.runwith arguments passed as a list, which is a secure implementation that prevents shell injection. This behavior is transparent and aligns with the skill's stated purpose of capturing project state.\n- [SAFE]: The code and instructions follow best practices for local utility scripts. No obfuscation, prompt injection, or suspicious external dependencies were found.
Audit Metadata