handoff-notes
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
composioCLI tool to perform searches and execute actions (GORGIAS_LIST_TICKETS,GORGIAS_GET_TICKET). These operations are consistent with the skill's stated purpose of gathering ticket data for handoff notes. - [SAFE]: No indicators of malicious intent, such as obfuscation, persistence, or data exfiltration to unauthorized domains, were found. The skill leverages legitimate vendor-provided tooling.
- [SAFE]: While the skill processes untrusted ticket data (representing an indirect prompt injection surface), the risk is mitigated by the structured markdown output format and the
disable-model-invocation: truesetting which prevents the agent from executing further tools based on the fetched content.
Audit Metadata