handoff
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill compacts conversation history into a handoff document. This conversation history is untrusted data that could contain instructions designed to influence the behavior of the agent generating the summary or the agent receiving the handoff.
- Ingestion points: Processes the current conversation history (SKILL.md).
- Boundary markers: Absent; there are no specific instructions to use delimiters or ignore embedded commands in the source text.
- Capability inventory: The skill has the capability to write files to the operating system's temporary directory.
- Sanitization: The skill provides proactive instructions to redact sensitive information (API keys, passwords, PII) before saving.
Audit Metadata