handoff
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious code, obfuscation, or external network requests were detected in the skill instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes conversation history which acts as an ingestion point for potentially untrusted data.
- Ingestion points: Conversation history (SKILL.md).
- Boundary markers: None specified for the processed content.
- Capability inventory: File-write access to the operating system's temporary directory.
- Sanitization: The skill contains explicit instructions to redact sensitive information (API keys, passwords, PII) before saving the document.
- [COMMAND_EXECUTION]: The skill instructs the agent to save the generated document to the operating system's temporary directory. This is a local file system operation used for transient data storage outside the primary workspace.
Audit Metadata