handoff
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run standard development commands such as
git diff,git status, andls. These commands are used solely to gather metadata about modified files and existing project plans for documentation purposes. - [SAFE]: The skill's primary function is creating local markdown files in the
docs/handoffs/directory. It does not perform network operations, access sensitive credentials, or use obfuscation techniques. - [PROMPT_INJECTION]: While the skill processes external data like file lists and existing project plans, it does so to summarize state rather than executing the contents. This represents a typical indirect prompt injection surface inherent to documentation tasks, with no evidence of malicious patterns.
Audit Metadata