The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill facilitates context transfer by generating a Markdown file that incorporates potentially untrusted data sources, such as user quotes and dynamic workspace state, which are then interpreted as instructions by a successor agent.
Ingestion points: SKILL.md identifies user sentences, live files, and tool output as the primary data sources for generating handoff content.
Boundary markers: assets/handoff.template.md employs a strong, bold directive header designed to define the file as a task and explicitly forbid the successor agent from editing, summarizing, or reviewing it.
Capability inventory: The skill performs standard file system writes to create handoff records within the .handoff/ directory.
Sanitization: SKILL.md includes a specific instruction in step 3 to "leave out secrets" when recording project paths, commands, and commits.

session-handoff