The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill records intent, local changes, and plan records into a handoff file for future sessions. This creates a surface where instructions embedded in project files could be propagated between agent sessions. Ingestion points include local changes and existing plan files. Boundary markers are limited to Markdown headers. Capabilities are restricted to local file writes. The skill includes sanitization instructions to avoid credentials and transcripts.
[SAFE]: The skill explicitly mandates that no credentials should be included in the handoff and identifies transcript dumping as an anti-pattern.
[SAFE]: The skill does not perform network operations, execute remote scripts, or require elevated privileges.

flow-handoff