experiment-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands and filesystem operations (such as directory creation, deletion, and archiving with tar) via helper scripts. These operations are used to implement the core functionality of workspace isolation and merging verified changes back into the project.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local Markdown files within the project's
.experiments/directory to manage experiment states. It utilizes regular expressions to parse specific metadata fields. Potential risks associated with shell command construction are mitigated by strict input validation, such as verifying that experiment identifiers (slugs) follow a restricted character set.
Audit Metadata