handoff
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to summarize the current conversation history into a handoff document for a subsequent agent session. This process creates an attack surface where malicious instructions embedded in the conversation history could be summarized and later executed or obeyed by the fresh agent session.
- Ingestion points: The skill ingests the entire current conversation history as the source for the handoff document.
- Boundary markers: There are no instructions to use specific delimiters or boundary markers within the generated handoff document to separate the summary from instructions.
- Capability inventory: The skill writes the generated summary to the system temporary directory (e.g., /tmp, $TMPDIR, %TEMP%) and prints the path.
- Sanitization: The instructions include a specific directive to redact sensitive information like API keys, passwords, and PII from the output document.
Audit Metadata