handoff
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill summarizes conversation history to create a handoff document for subsequent sessions, creating a surface for indirect instructions. 1. Ingestion points: Current conversation history processed by the agent. 2. Boundary markers: None explicitly defined to delimit conversation data from handoff instructions. 3. Capability inventory: File writing to the operating system's temporary directory. 4. Sanitization: Instructions explicitly mandate the removal of API keys, passwords, and PII.
- [DATA_EXFILTRATION]: Handoff documents are saved to the system's temporary directory rather than the workspace. While this is standard for transient state, safety depends on the agent correctly scrubbing credentials as instructed.
Audit Metadata