sdd-handoff
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local validation script (scripts/validate_handoff.py) to check the structural integrity of generated markdown files. The script is bundled with the skill and performs regex-based linting without requiring external network access.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests conversation history to generate summaries. While this represents a surface for untrusted data ingestion, the risk is limited to the accuracy of the generated documentation, as the skill does not perform privileged operations or remote code execution based on the ingested data.
Audit Metadata