handoff
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted conversation history to generate a summary, which presents an attack surface for instructions embedded in the chat to influence the handoff document.
- Ingestion points: The agent's conversation history is summarized as per the instructions in SKILL.md.
- Boundary markers: None provided in the instruction template to delineate the conversation history.
- Capability inventory: The skill has the capability to write the generated summary to the host's temporary directory ($TMPDIR, /tmp, or %TEMP%).
- Sanitization: The skill explicitly instructs the agent to redact sensitive information, including API keys, passwords, and personally identifiable information, before saving the document.
Audit Metadata