handover
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard git commands including
git status,git branch,git log, andgit stashto collect repository metadata required for context persistence. - [PROMPT_INJECTION]: The skill functions as a bridge for session data, creating a surface for indirect prompt injection where malicious instructions in one session could be persisted to a handover file. However, the skill provides specific templates and guidelines to help the agent structure data safely.
- [DATA_EXFILTRATION]: The skill reads repository state and session history to write summaries to the local file system (defaulting to
docs/handover.md). These operations are purely local and do not involve network transmission of data.
Audit Metadata