ft-handoff
Warn
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a shell script located in a sibling directory outside its own package. * Evidence: Step 9 executes
../ft-init/scripts/fast-track-ai-index.sh <target>. * Context: Path resolution rules indicate this script is external to the skill's directory, residing in a siblingft-initcomponent. - [DYNAMIC_EXECUTION]: The skill performs runtime execution of a secondary shell script to validate or index the repository. * Evidence: The skill triggers the execution of
fast-track-ai-index.shas a final lifecycle step. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from active conversations and external index files to generate structured handoff documents. * Ingestion points: Step 1 reads the current conversation history and the
fast-track-ai/INDEX.mdfile. * Boundary markers: Step 2 and theassets/handoff.mdtemplate use the header## Active user instructions, verbatimto delimit user-provided content. * Capability inventory: The skill can write files to the repository (Step 6) and execute shell scripts (Step 9). * Sanitization: Step 2 contains instructions to omit secrets or personal data, though this relies on the model's compliance rather than programmatic filtering.
Audit Metadata