task-handoff
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and a YAML state schema; no executable scripts (Python, JavaScript, or shell) are provided.
- [PROMPT_INJECTION]: The workflow for resuming tasks introduces an indirect prompt injection surface (Category 8).
- Ingestion points: The agent is instructed to read handoff markdown documents from the
tasks/directory to resume work. - Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore potential instructions embedded within the handoff documents.
- Capability inventory: The agent is expected to read files, run tests, and modify source code based on the content of the handoff files.
- Sanitization: There is no mechanism described for validating or sanitizing the content of the handoff files before the agent acts upon them.
Audit Metadata