handoff
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes the current conversation history to generate a summary, which serves as an ingestion point for potentially untrusted data. If previous conversation segments included content from external sources or malicious user inputs, they could influence the resulting handoff document.
- Ingestion points: Current conversation history (referenced in SKILL.md).
- Boundary markers: None present to delimit untrusted conversation content from the summary instructions.
- Capability inventory: The skill instructs the agent to perform file write operations to the OS temporary directory.
- Sanitization: The skill includes a positive security control by explicitly instructing the agent to redact sensitive information such as API keys, passwords, and PII.
Audit Metadata