write-handoff
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted project data (source code, plans, and diffs) to generate handoff reports, creating a surface for potential indirect prompt injection.
- Ingestion points: SKILL.md (instructions to read project plans, documentation, and source code).
- Boundary markers: No specific delimiters or safety instructions are defined to separate untrusted project data from the handoff instructions.
- Capability inventory: The skill has the capability to read project files and write new documentation files to the repository.
- Sanitization: No explicit sanitization or filtering of the ingested content is specified.
Audit Metadata