handoff
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted conversation history and summarizes it into a document saved to the host's temporary directory. This creates a surface for indirect prompt injection where malicious instructions in the conversation could be persisted into the handoff document, potentially influencing the behavior of future agent sessions.
- Ingestion points: Current conversation history as described in SKILL.md.
- Boundary markers: No explicit delimiters or boundary markers are defined for the summarized content in the instructions.
- Capability inventory: Writing files to the operating system's temporary directory.
- Sanitization: The instructions include a mitigation step requiring the agent to redact sensitive information such as API keys, passwords, and personally identifiable information.
Audit Metadata