task-handoff
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or persistence mechanisms were detected.
- [COMMAND_EXECUTION]: The skill utilizes a local companion script
scripts/task-handoff.shto handle the preparation and finalization of handoff files. This is a functional requirement for the skill's state management and is implemented with significant defensive measures. - [SAFE]: The companion script implements strong security hygiene, including the use of
umask 077to ensure file privacy, restrictive directory permissions (0700), and robust shell and YAML quoting (shell_quote,yaml_quote) to prevent injection during command generation. - [SAFE]: Interaction with the system clipboard (via macOS
pbcopy/pbpaste) is used solely for the documented purpose of passing a generated command to the user or a subsequent agent session, and includes read-back verification to ensure data integrity.
Audit Metadata