session-handoff
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git status,git diff --stat, andgit log --onelineto gather context about changes in the repository. These are common development tools used here for documentation purposes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the conversation transcript and repository history to generate a handoff document, creating a potential vector for propagating instructions embedded in source code comments or git logs.
- Ingestion points: Transcript history,
git diffoutput,git logoutput, and user-provided goals (SKILL.md). - Boundary markers: Absent; the skill does not use specific delimiters or instructions to ignore potential injections within the gathered data.
- Capability inventory: File system write access (
HANDOFF.md) and execution of git commands (SKILL.md). - Sanitization: Absent; the skill does not specify filtering or escaping of external content before interpolation into the generated document.
Audit Metadata