handoff

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various git commands such as rev-parse, branch, status, diff, log, and optionally commit to gather and record the current repository state. This is a standard and necessary function for creating an accurate handoff document.
  • [PROMPT_INJECTION]: The skill implements a mechanism for cross-session persistence by writing instructions for the AI to follow when it resumes, which constitutes an indirect prompt injection surface. * Ingestion points: The agent reads generated pause-*.md or docs/summaries/CHECKLIST.md files upon resuming a session. * Boundary markers: Instructions for the future session are clearly delineated within specific headers and markdown blocks in the generated files. * Capability inventory: The resuming sessions are directed to perform file system checks, execute git commands, and rebuild internal task lists based on the file content. * Sanitization: The skill scrapes identifiers from the session transcript into a Coordinate Closet. While intended for technical continuity, this could carry over untrusted content from the transcript into the next session instructions without explicit sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 05:40 PM