session-save
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of a handoff file containing a summary of the current session, which can be loaded by future agent instances. This process creates a persistence vector for instructions that may have originated from untrusted external data processed during the session.
- Ingestion points: Aggregates information from the active session context (modified files, decisions, and status) into the handoff document.
- Boundary markers: No specific delimiters or safety instructions are defined in the instructions to separate potentially poisoned session data from the structural metadata of the handoff file.
- Capability inventory: Requires file-writing capabilities to store Markdown files in the
.claude/sessions/directory. - Sanitization: No sanitization, escaping, or validation of session content is performed before it is written to the handoff file.
Audit Metadata