handoff
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and summarize conversation history, which is untrusted data that could contain malicious instructions.
- Ingestion points: The skill ingests the entire current conversation history to generate the handoff document.
- Boundary markers: There are no specific delimiters or markers defined to isolate the untrusted conversation content from the summary generation logic.
- Capability inventory: The skill utilizes file system write capabilities to save the handoff document to a temporary directory.
- Sanitization: The skill contains explicit instructions to redact sensitive information such as API keys, passwords, and personally identifiable information before saving the output.
Audit Metadata