handoff

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of natural language instructions without any embedded scripts, binary files, or automated execution commands.
  • [DATA_EXPOSURE]: The instructions include a specific security requirement for the agent to 'Redact any sensitive information, such as API keys, passwords, or personally identifiable information,' which follows best practices for data handling.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes conversation history, which is a source of untrusted data. However, the instructions focus on summarization and redaction with no complex tool invocation or logic that would increase the risk of adversarial instruction execution.
  • Ingestion points: Conversation history and user-passed arguments (SKILL.md).
  • Boundary markers: Explicit instructions to redact sensitive data and focus on a specific summary format.
  • Capability inventory: Local file write to the OS temporary directory.
  • Sanitization: Mandatory redaction of credentials and PII.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:52 PM