handoff
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to save output to the operating system's temporary directory rather than the local workspace. This moves conversation data (even if summarized) outside of controlled project boundaries.
- [PROMPT_INJECTION]: The skill facilitates indirect prompt injection by design. It takes untrusted user input from the current conversation and re-presents it as context or "suggested skills" for a future agent. Ingestion points: Current conversation history. Boundary markers: Absent; no delimiters are specified to separate the summary from the instructions for the next agent. Capability inventory: File system write access is used to save the handoff document. Sanitization: Instructions specify redacting credentials but do not mention sanitizing instructions or command-like text within the conversation summary.
Audit Metadata