bring-yourself-back-online

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses cat, git, and date to gather local repository information and retrieve the handoff file content. These are standard read-only operations for development-oriented skills.
  • [DATA_EXFILTRATION]: No network access or data transmission patterns were detected. All operations are local to the environment and do not involve remote communication.
  • [PROMPT_INJECTION]: The skill ingests untrusted data from a local .handoff.md file to restore session context, which is a standard pattern for context management.
  • Ingestion points: Content from .handoff.md is read into the context in SKILL.md using the cat command.
  • Boundary markers: Absent; the instructions do not specify the use of delimiters when internalizing the file's content.
  • Capability inventory: The skill only has access to read-only commands (cat, git, date) and lacks network access or file-modification capabilities, significantly limiting the impact of potential injection.
  • Sanitization: Absent; the skill relies on the integrity of the local handoff file created by its paired utility.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 03:09 AM