{"data":{"skill":{"slug":"agentkitco-session-handoff","name":"session-handoff","icon":"📦","repo":"https://github.com/agentkitco/agentkit-dev-skills/tree/a5058856442fcb89bd538b1c01f94558488bfac3/skills/session-handoff","status":"approved","author":"agentkitco","authorVersion":"1.0","skillstoreRevision":2},"audit":{"id":"29c03240-2b30-49c3-a3c8-70092b0bbc60","skill_id":"e1c334e6-e032-4314-adc0-0cc7b3157709","version":2,"content_hash":"v3:18efac79a818d7e997295839638fdd21906cfd1c:57db3b690a3ecceb87a17f96cb92b256bdfe0a9f981f6932beee7ebb53d1ef7a:1d314448cb978c6e2c0a2360de605881b1a815be4cb58cf90b51bbe4533fe9f8:736b696c6c732f6167656e746b6974636f2f73657373696f6e2d68616e646f6666:30dcffa5368d61082b70f30d11cf8e19","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All five static findings are false positives: Markdown backticks, read-only Git inspection, and verification placeholders explain the matches. No evidence found of prompt injection, data exfiltration, or malicious intent in SKILL.md. The workflow writes a handoff document and may run project tests, so repository trust and normal tool permissions still matter.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":16,"line_start":16},{"file":"SKILL.md","line_end":17,"line_start":17},{"file":"SKILL.md","line_end":52,"line_start":23}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":60,"audit_model":"codex","audited_at":"2026-10-22T19:31:39.67+00:00","created_at":"2026-10-22T22:26:24.852615+00:00","static_findings":[{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. **Check the real state.** Run `git status --short`, `git branch --show-current` and `git log --on","category":"external_commands","line_end":16,"severity":"medium","line_start":16},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. **Write `HANDOFF.md`** in the repository root (or the path the user names) with the sections belo","category":"external_commands","line_end":17,"severity":"medium","line_start":17},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":52,"severity":"medium","line_start":23},{"id":"blocker:SKILL.md:51:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- <Claims you did not check>","category":"blocker","line_end":51,"severity":"low","line_start":51},{"id":"blocker:SKILL.md:56:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Separate verified facts from guesses. If you did not run it, list it under \"Not verified\".","category":"blocker","line_end":56,"severity":"low","line_start":56}],"finding_verdicts":[{"id":"external_commands:SKILL.md:16:ruby-shell-backtick-execution","reason":"Line 16 uses Markdown backticks around fixed, read-only Git commands for repository state inspection, not Ruby or shell backtick evaluation. Optional project tests support handoff accuracy; no command injection or malicious payload is shown.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"Line 17 formats HANDOFF.md as an inline Markdown filename and requests the expected documentation output. No executable backtick expression is present.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"Lines 23 through 52 contain a fenced Markdown handoff template with headings and placeholders. The fence is documentation formatting, not shell or Ruby execution.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:51:system-reconnaissance","reason":"Line 51 is a placeholder for unchecked claims within the Not verified section. It requests no system inspection, enumeration, or information collection.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:56:system-reconnaissance","reason":"Line 56 instructs the agent to distinguish verified facts from guesses and label unexecuted checks. This is accuracy guidance, not system reconnaissance.","verdict":"false_positive","confidence":1}],"semantic_findings":[],"subject_marketplace_commit_sha":"18efac79a818d7e997295839638fdd21906cfd1c","subject_content_hash":"57db3b690a3ecceb87a17f96cb92b256bdfe0a9f981f6932beee7ebb53d1ef7a","subject_tree_hash":"1d314448cb978c6e2c0a2360de605881b1a815be4cb58cf90b51bbe4533fe9f8","subject_plugin_path":"skills/agentkitco/session-handoff","audit_payload_hash":"30dcffa5368d61082b70f30d11cf8e19","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"18efac79a818d7e997295839638fdd21906cfd1c","contentHash":"57db3b690a3ecceb87a17f96cb92b256bdfe0a9f981f6932beee7ebb53d1ef7a","treeHash":"1d314448cb978c6e2c0a2360de605881b1a815be4cb58cf90b51bbe4533fe9f8","pluginPath":"skills/agentkitco/session-handoff","auditPayloadHash":"30dcffa5368d61082b70f30d11cf8e19"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/agentkitco-session-handoff/audits/2/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}