resume-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon instructions contained within 'handoff' markdown documents located in
thoughts/shared/handoffs/. These documents define 'Resume contracts' including next steps, re-arm tasks, and autonomy settings. - Ingestion points: The
Readtool is used inreferences/process.mdto load the full content of handoff files into the agent context. - Boundary markers: The skill lacks explicit delimiters or instructions to prevent the agent from being influenced by adversarial content within the handoff data.
- Capability inventory: The agent is granted
Bash,TodoWrite, andReadcapabilities, which it uses to implement tasks, modify codebases, and interact with external CLI tools. - Sanitization: No validation or sanitization is performed on the content extracted from the handoff documents before the agent proceeds with implementation.
- [COMMAND_EXECUTION]: The
SKILL.mdfile executes a Bash script during the prerequisite check to discover handoff files. This script utilizesfind,grep, andlsto locate files matching specific ticket ID patterns extracted from user arguments. - [EXTERNAL_DOWNLOADS]: The skill interacts with the Linear issue tracker via the
linearisCLI and performs data synchronization usinghumanlayer thoughts sync. These interactions are consistent with the skill's intended purpose of managing project tasks.
Audit Metadata