task-handoff
Warn
Audited by Socket on Oct 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN in purpose and data flow: this is a workflow/handoff skill that reads local repo state and writes one markdown handoff without exfiltration or credential handling. However, it relies on local ai-handoff/ai-coord tooling and optionally a local orchestration skill whose provenance was not publicly verified in the provided evidence, so overall security risk remains elevated from transitive trust and unverifiable local dependencies rather than from malicious behavior.
Confidence: 90%Severity: 70%
Audit Metadata