handoff-notes

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the composio CLI tool to perform searches and execute actions (GORGIAS_LIST_TICKETS, GORGIAS_GET_TICKET). These operations are consistent with the skill's stated purpose of gathering ticket data for handoff notes.
  • [SAFE]: No indicators of malicious intent, such as obfuscation, persistence, or data exfiltration to unauthorized domains, were found. The skill leverages legitimate vendor-provided tooling.
  • [SAFE]: While the skill processes untrusted ticket data (representing an indirect prompt injection surface), the risk is mitigated by the structured markdown output format and the disable-model-invocation: true setting which prevents the agent from executing further tools based on the fetched content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 08:13 PM
Security Audit — agent-trust-hub — handoff-notes