handoff
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various git commands such as rev-parse, branch, status, diff, log, and optionally commit to gather and record the current repository state. This is a standard and necessary function for creating an accurate handoff document.
- [PROMPT_INJECTION]: The skill implements a mechanism for cross-session persistence by writing instructions for the AI to follow when it resumes, which constitutes an indirect prompt injection surface. * Ingestion points: The agent reads generated pause-*.md or docs/summaries/CHECKLIST.md files upon resuming a session. * Boundary markers: Instructions for the future session are clearly delineated within specific headers and markdown blocks in the generated files. * Capability inventory: The resuming sessions are directed to perform file system checks, execute git commands, and rebuild internal task lists based on the file content. * Sanitization: The skill scrapes identifiers from the session transcript into a Coordinate Closet. While intended for technical continuity, this could carry over untrusted content from the transcript into the next session instructions without explicit sanitization.
Audit Metadata