handoff
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and updates a handoff document based on the current project state, creating a surface for cross-session instruction injection.
- Ingestion points: Reads
HANDOFF.mdfrom the project root and references other project documents (PRDs, ADRs, issues). - Boundary markers: None specified for separating handoff content from instructions.
- Capability inventory: Performs file-read and file-write operations on
HANDOFF.mdin the project root. - Sanitization: No explicit sanitization or filtering of existing document content before rewriting.
Audit Metadata