handover
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command sequence
f=$(mktemp "${TMPDIR:-/tmp}/handover.XXXXXX") && mv "$f" "$f.md" && echo "$f.md"to generate a path for the handover document. This involves direct shell interaction to manage temporary files. - [INDIRECT_PROMPT_INJECTION]: The skill processes the current conversation history, which is untrusted data, to generate its output.
- Ingestion points: The agent reads the "current conversation" history as the primary source for the handover summary, as described in
SKILL.md. - Boundary markers: There are no instructions providing delimiters or warnings to ignore embedded instructions within the conversation history.
- Capability inventory: The skill has the ability to execute shell commands (
mktemp,mv) and perform file system writes via the agent's file tools. - Sanitization: The instructions do not specify any validation, filtering, or escaping of the conversation content before it is summarized and written to a new file.
Audit Metadata