compaction-handoff
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard utilities including
git,gh,sed,find,mkdir,cat,mv, andwcto inspect repository state and manage handoff files. These operations are local to the repository and serve the primary function of state management.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for persisting agent context inMEMORY.mdand.handoff/CURRENT.mdfor retrieval in future sessions. This constitutes an injection surface if the repository is modified by an untrusted source.\n - Ingestion points: Files
MEMORY.mdand.handoff/CURRENT.mdare read during the session resume phase.\n - Boundary markers: The protocol uses a structured markdown template for resume anchors to provide clarity between different types of information.\n
- Capability inventory: The agent has the capability to write to the file system and execute shell commands based on its context.\n
- Sanitization: The protocol requires the agent to prune raw logs and verify all facts against three specific criteria before persistence.
Audit Metadata