handoff
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted conversation history to generate summaries, creating a surface for indirect prompt injection attacks.
- Ingestion points: The skill ingests the 'current conversation' history to create the handoff document.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are used when processing the conversation history.
- Capability inventory: The agent is instructed to write files to the system temporary directory ($TMPDIR, /tmp, or %TEMP%).
- Sanitization: The skill explicitly instructs the agent to redact API keys, passwords, and PII, which protects against data exposure but does not sanitize the input against malicious instructions.
Audit Metadata