session-pause
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several git commands including
git rev-parse,git branch,git status,git diff, andgit log. These are used appropriately to gather local repository state for the purpose of documenting a session handoff. - [INDIRECT_PROMPT_INJECTION]: The skill generates a markdown file designed to be read by the agent in a future session, which represents a potential indirect prompt injection surface.
- Ingestion points: Handoff files are stored in
.claude-sessions/ordocs/summaries/to be read by the agent during session resumption. - Boundary markers: The generated template includes specific instructions for the next session to "Review git state" and evaluate "Stale if" conditions to ensure the handoff information is still valid before acting on it.
- Capability inventory: The skill utilizes local shell commands (git) and file system write access to create the handoff artifacts.
- Sanitization: The skill relies on structured sections and git output to maintain data integrity, though it does not explicitly sanitize the natural language summaries provided by the AI.
Audit Metadata