The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Bash tool to run system-level commands like ps auxww, git status, and gh pr. These are used to capture the current execution environment and task status for documentation purposes. This behavior is aligned with the skill's primary function of task handoff.
[PROMPT_INJECTION]: The PICKUP mode introduces a surface for indirect prompt injection by instructing the agent to read and follow the 'handoff' package from a previous session. However, the skill provides clear mitigation strategies: it requires the agent to verify all inherited claims against the current environment ('observed state wins') and to mark unverified information appropriately. * Ingestion points: Input handoff package and CLAUDE.md. * Boundary markers: Explicit verification requirement and prioritization of observed state. * Capability inventory: Bash, Read, Grep, and Glob tools. * Sanitization: Mandatory redaction of credentials and tokens from the state package.

session-handoff