handoff
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to create directories and write files to the user's home directory (~/.manifest-dev/handoffs/). This is standard behavior for maintaining persistent tool state and is benign in this context.
- [INDIRECT_PROMPT_INJECTION]: The skill allows reading from previous handoff files to update context. While this creates a surface for processing external data, the content is intended to be agent-generated summaries, and no unsafe interpolation or execution of this data is requested. * Ingestion points: Reads file content when a path to a prior handoff is passed as an argument. * Boundary markers: Not specified. * Capability inventory: File write and directory management. * Sanitization: None requested.
Audit Metadata