handoff
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes and summarizes the current conversation history into a local file named
.badger-handoff, which acts as a persistence mechanism for session data. - Ingestion points: The "useful conversation" state, which may include content from external files, websites, or user inputs processed earlier in the session (SKILL.md).
- Boundary markers: No specific delimiters or "ignore embedded instructions" markers are requested for the summary content to prevent the downstream tool from executing instructions contained within the persisted text.
- Capability inventory: The skill performs a file-write operation to save the summary to the local file system (SKILL.md).
- Sanitization: The instructions do not include requirements for sanitizing or escaping the conversation content before it is written to the handoff file.
Audit Metadata