The Agent Skills Directory

[SAFE]: The skill implements a transparent process for state preservation, utilizing common shell commands such as git diff, git status, and ls to collect metadata about the current workspace. The resulting handoff files are stored locally in the docs/handoffs/ directory, facilitating context continuity between sessions without requiring network access or elevated privileges.
[INDIRECT_PROMPT_INJECTION]: The skill presents a theoretical surface for indirect prompt injection because it ingests file paths and conversation history to generate its summaries. However, this is inherent to its primary function and is mitigated by the lack of high-risk capabilities like remote code execution or automated network exfiltration. 1. Ingestion points: Local file names from git/filesystem and current session conversation context. 2. Boundary markers: Not explicitly defined in the markdown template. 3. Capability inventory: File-write access to the local docs/handoffs/ directory. 4. Sanitization: No specific sanitization of external data is performed before interpolation into the handoff document.

handoff