create-handoff

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external project files (such as .turbo/improvements.md and existing plan files) and the conversation history to generate a summary. This is a standard functional requirement for a handoff tool.
  • Ingestion points: .turbo/improvements.md, .turbo/plans/, and current conversation context.
  • Boundary markers: Absent; the skill relies on the agent's ability to summarize content.
  • Capability inventory: Executes local git metadata commands, reads project files, and writes new markdown files to the .turbo/handoff/ directory.
  • Sanitization: Not explicitly mentioned, but the output is static markdown intended for future human or agent review.
  • [COMMAND_EXECUTION]: The skill executes benign shell commands to resolve paths and check repository status.
  • Evidence: date +%Y-%m-%d, git rev-parse --show-toplevel, git rev-parse --git-dir, git rev-parse --git-common-dir, and git status --short.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:13 PM