Session Handoff

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to save and resume local session notes with disclosed helper scripts; users should mainly watch the persistent handoff content and install source.

This skill is coherent for creating local AI session handoffs. Before installing, verify the source you install from, and when using it, review generated handoff files for accuracy and make sure they do not contain secrets or instructions you would not want a future agent to follow.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI06: Memory and Context Poisoning

What this means

A future agent may trust and act on information saved in these handoff files.

Why it was flagged

The skill intentionally makes saved handoff documents part of future agent context and action planning, so stale or tampered handoffs could influence later work.

Skill content

Read the handoff document completely... Start with "Immediate Next Steps" item #1.

Recommendation

Review handoff documents before resuming, keep them in trusted project storage, and continue using the provided validation and staleness checks.

Low

#ASI05: Unexpected Code Execution

What this means

Installing and using the skill means running local helper scripts that create files and inspect git/project metadata.

Why it was flagged

The skill instructs use of bundled Python scripts. This local code execution is disclosed and central to the stated purpose, but it still runs code in the user's project environment.

Skill content

Run the smart scaffold script:

```bash
python scripts/create_handoff.py [task-slug]
```

Recommendation

Run the scripts only from a trusted installation and in the intended project directory.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If installed from a moving branch or untrusted source, the code obtained later could differ from the reviewed artifacts.

Why it was flagged

The README documents installation from a GitHub branch/path rather than a pinned release or digest. This is disclosed, but users should verify provenance.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/tools/session-handoff

Recommendation

Prefer a pinned version or trusted registry source, and review the installed files before use.