session-handoff

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the entire CLI and standard Unix utilities like jq, grep, and sed to list sessions and extract transcripts. These operations are performed locally and are strictly necessary for the skill's primary function of session management.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests session transcripts which constitute untrusted data. While this creates a theoretical surface for indirect prompt injection (Category 8), it is a fundamental requirement for session handoff functionality and is handled via standard data processing workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:15 AM