save-handoff
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
nmemCLI tool to create session handoff threads. This is a vendor-owned command-line utility used for its intended purpose of session persistence and state management. - [DATA_EXFILTRATION]: The skill transmits structured session summaries (goals, decisions, next steps) to the
nmemservice. This data transfer is the core functionality of the skill and is designed to trigger only upon explicit user request, ensuring the user maintains control over shared information. - [PROMPT_INJECTION]: The skill ingests session data and interpolates it into a shell command for the
nmemtool. While this creates a surface for indirect prompt injection where malicious content in the session could influence the command, the risk is minimal as the tool is vendor-controlled and the operation is user-initiated.
Audit Metadata