handoff
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted conversation history to generate a handoff document, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill reads the entire current conversation history and user-provided arguments from
SKILL.md. - Boundary markers: The instructions lack specific delimiters or boundary markers to distinguish user-provided conversation content from the agent's summarization instructions.
- Capability inventory: The skill instructs the agent to write a summary file to the operating system's temporary directory.
- Sanitization: The skill includes explicit instructions to identify and redact sensitive information, such as API keys, passwords, and PII, before generating the final output.
Audit Metadata