handoff-invoke — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited handoff-invoke (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A handoff is a task the user parked earlier so they could stay focused on something else. Invoking one means: load it, give the user a solid orientation on what it is, and then continue together.
Handoffs live in .handoffs/ in the project root, named handoff-NNNN.md.
.handoffs/ does not exist or is empty, tell the user there are no savedhandoffs yet and mention they can create one with handoff-create. Stop there.
.handoffs/handoff-NNNN.md (zero-pad it).<handoff-summary> andtitle of each file and match the most likely one. If two or more are plausible, briefly list the candidates and ask which one.
Read the whole file: frontmatter, the <handoff-summary> block, and the Context, Task, and Conversation sections.
Don't just dump the file contents back. Give the user a genuine briefing so they can step back into this task with full context, even if they parked it long ago. Cover:
created date).Security: Do not repeat secrets or values that look like credentials in chat — describe them structurally and let the user open the file directly.
Then check the current state of the project against the handoff. A handoff is a snapshot frozen in time — files may have changed, the task may be partly done already. Concretely:
Context or Task sectionsand verify they still exist and have not changed significantly.
of the work was already done (e.g. the feature exists, the bug is gone).
If something no longer matches reality, point it out before asking how to proceed.
End by handing the decision to the user. Depending on the situation they may want to discuss and refine the task further, start working on it now, or hand it to another agent for processing. Ask which they'd like — don't assume.
Invoking a handoff does not remove it. The file stays in .handoffs/ until the user explicitly closes it with handoff-close.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.