handoff
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the standard system command
mktempto generate a path for a temporary document. This is a common and legitimate system operation for managing temporary files. - [INDIRECT_PROMPT_INJECTION]: The skill creates a handoff document based on the current conversation history, which creates a surface for indirect prompt injection if the summarized input contains malicious instructions.
- Ingestion points: The current conversation history is processed into a summary.
- Boundary markers: No specific delimiting or instruction-ignoring markers are used in the generated document.
- Capability inventory: The skill utilizes file system writing to save the summary (SKILL.md).
- Sanitization: No sanitization or filtering of the ingested conversation data is implemented.
Audit Metadata