Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently creates a local handoff summary and discloses that it saves the file to the OS temporary directory, with privacy cautions but no evidence of malicious behavior.
Install this if you want agents to create handoff summaries. Before invoking it, avoid including secrets or highly sensitive conversation details, review the generated file path, and delete the temp file when it is no longer needed.
The trigger phrases are broad and context-light, so the skill may activate in situations where a user did not intend to persist or summarize sensitive conversation state. In a handoff skill, accidental invocation can cause over-collection of confidential context and create unnecessary artifacts that outlive the session.
Writing a conversation-derived handoff to the OS temporary directory can expose sensitive project, credential-adjacent, or business data to other local users, backup/indexing tools, or later processes, especially if temp storage is shared or not promptly cleaned. Revealing the absolute path further increases discoverability of the artifact and may aid unintended access.
No suspicious patterns detected.
