handoff
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes conversation history to generate a handoff document, which presents a surface for indirect instruction propagation if the history contains malicious content.
- Ingestion points: Uses conversation history as input for the summary.
- Boundary markers: No specific delimiters or safety warnings are provided for the output file content.
- Capability inventory: Saves the generated summary to the operating system's temporary directory.
- Sanitization: Explicitly instructs the agent to redact sensitive information such as API keys, passwords, and PII.
Audit Metadata