session-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
entireCLI and standard Unix utilities likejq,grep, andsedto list sessions and extract transcripts. These operations are performed locally and are strictly necessary for the skill's primary function of session management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests session transcripts which constitute untrusted data. While this creates a theoretical surface for indirect prompt injection (Category 8), it is a fundamental requirement for session handoff functionality and is handled via standard data processing workflows.
Audit Metadata