handoff
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
mktemputility to generate a secure path for a temporary file. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its processing of untrusted session data. 1. Ingestion points: The current conversation history is used as the primary input for the summary. 2. Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore instructions embedded within the conversation data. 3. Capability inventory: The agent has the capability to write the generated summary to the local file system. 4. Sanitization: There is no logic provided to filter or escape instructions found within the conversation history.
Audit Metadata