handoff
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes read-only commands including
git status,git log, andgh pr listto audit the local and remote repository state. These operations are strictly used for information gathering to populate the handoff report.- [EXTERNAL_DOWNLOADS]: The skill queries the npm registry usingnpm viewto retrieve package version metadata. This targets a well-known service for legitimate project verification purposes.- [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found. The skill provides clear instructions to avoid executing tests or builds, maintaining a secure, read-only posture. Reference torailly/skillsis identified as a legitimate vendor resource belonging to the skill author.
Audit Metadata