handoff
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
mktempshell command to create a temporary file path for the handoff summary. While this is a common utility, it involves direct interaction with the host's command line. - [PROMPT_INJECTION]: The skill identifies as having a surface for indirect prompt injection (Category 8). It is instructed to reference and potentially process external artifacts such as PRDs, plans, and issues via paths or URLs. Malicious content within these external sources could influence the agent's summarization or subsequent actions.
- Ingestion points: External project artifacts (PRDs, ADRs, issues, etc.) accessed via file paths or URLs (SKILL.md).
- Boundary markers: No specific delimiters or instructions are provided to the agent to treat referenced content as untrusted data.
- Capability inventory: The skill can execute shell commands (
mktemp) and perform file system write operations. - Sanitization: There is no evidence of validation or sanitization of the content fetched from the referenced URLs or file paths.
Audit Metadata