paseo-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input through the
$ARGUMENTSvariable and interpolates it into a structured briefing for a new sub-agent created via thecreate_agenttool. - Ingestion points: Untrusted data enters the agent context through the
$ARGUMENTSplaceholder inSKILL.md. - Boundary markers: The skill employs a structured Markdown template (headers such as
## Task,## Context,## Acceptance criteria) to delimit the handoff information. - Capability inventory: The skill uses
create_agent,create_workspace, andlist_profilesto manage the transition and environment. - Sanitization: The instructions do not specify explicit sanitization or filtering of the user input, relying on the structural template to maintain context.
Audit Metadata