claude-handoff
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
claudeCLI command with dynamically generated arguments. Specifically, it builds a command stringclaude --bg --name "<descriptive name>" "<handoff summary>"where the summary is derived from the current conversation context. - [PROMPT_INJECTION]: The skill transforms untrusted conversation data into a shell command, creating a surface for indirect prompt injection. * Ingestion points: Current conversation history and user arguments (SKILL.md). * Boundary markers: None used to encapsulate the summary within the command string. * Capability inventory: Shell command execution via the
claudeCLI (SKILL.md). * Sanitization: Includes a manual prompt instruction to redact sensitive information like API keys or passwords. - [DATA_EXPOSURE]: Conversation context is passed as a command-line argument. While the skill advises redacting sensitive info, this relies on the model's reliability in identifying all secrets before command execution.
Audit Metadata