create-handoff
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external project files (such as
.turbo/improvements.mdand existing plan files) and the conversation history to generate a summary. This is a standard functional requirement for a handoff tool. - Ingestion points:
.turbo/improvements.md,.turbo/plans/, and current conversation context. - Boundary markers: Absent; the skill relies on the agent's ability to summarize content.
- Capability inventory: Executes local
gitmetadata commands, reads project files, and writes new markdown files to the.turbo/handoff/directory. - Sanitization: Not explicitly mentioned, but the output is static markdown intended for future human or agent review.
- [COMMAND_EXECUTION]: The skill executes benign shell commands to resolve paths and check repository status.
- Evidence:
date +%Y-%m-%d,git rev-parse --show-toplevel,git rev-parse --git-dir,git rev-parse --git-common-dir, andgit status --short.
Audit Metadata