OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The Session Handoff skill manages markdown documents to preserve context between AI agent sessions. It uses Python scripts to collect project metadata via Git and validate document quality. Analysis identified that the skill executes local shell commands (Git) and ingests external project metadata, such as commit messages, which presents a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
4/12 files flagged
Score: 93/100 · 2 sections analyzed