project-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-related text data and files defined in the
scopeconfiguration to generate handoff summaries. - Ingestion points: Project files scanned during initialization and migration (
references/migrate.md), and handoff entries stored in the.handoff/directory (scripts/handoff.py). - Boundary markers: Data is stored as structured JSONL but presented as plain text in views without explicit "ignore instructions" delimiters for the agent.
- Capability inventory: Performs file read, write, and move operations (archiving/trash) within the local project directory.
- Sanitization: Basic whitespace normalization is performed on entry summaries using regular expressions.
- [COMMAND_EXECUTION]: The skill includes a Python CLI (
scripts/handoff.py) and a shell script (scripts/migrate.sh) that perform administrative file system tasks such as directory creation, file movement, and atomic file writes within the project workspace.
Audit Metadata