The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local git commands including git rev-parse, git branch, and git status to capture the repository's current state. These are standard read-only operations for development tools.
[SAFE]: The skill operates entirely on the local filesystem within the current repository's tmp/ directory. It does not perform network operations, access sensitive credentials, or attempt privilege escalation.
[PROMPT_INJECTION]: The skill ingests recent conversation context and user-supplied weighting instructions to generate the handoff file. This creates an indirect prompt injection surface where instructions could theoretically be persisted into the handoff file and read by a future session. However, the risk is minimal and inherent to the tool's primary purpose of session state persistence.

eo-handoff