handoff-c437d9 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited handoff-c437d9 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Carry work progress between Codex and Claude Code through one shared, human-readable HANDOFF.md file at the project root. This skill only reads and writes that document — it never launches the other CLI.
This Codex instance writes tool: codex when it saves.
Read the argument passed with the invocation:
save (aliases: out, 保存, 交接) → Save the current work into HANDOFF.md.resume (aliases: in, 接续, 恢复) → Resume from an existing HANDOFF.md.HANDOFF.md exists and its tool: header is not codex,do resume; otherwise do save. State which mode you picked and why.
An explicit argument always wins over auto-detect.
The document lives at <cwd>/HANDOFF.md by default. If the user names a different path, use that.
what works vs. what's still broken/partial, the concrete next steps, the relevant files, open questions, and how to verify.
git rev-parse --abbrev-ref HEAD → branchgit rev-parse --short HEAD → commitgit status --short and git diff --stat → uncommitted changes for "Current state"Use real output; never invent a branch/commit.
section truly has nothing, write - (none) rather than deleting the heading.
In Claude Code,cdinto this directory and run/handoff resume(or/handoffto auto-detect).
Do not run claude yourself.
resume and stop (offer /handoff save instead).
git status --short and git rev-parse --short HEAD.Compare the actual branch/commit/working tree to the document's header and "Current state". Explicitly flag any drift (e.g. doc says committed but the tree is dirty, or a different branch).
tool / model / timestamp), the Goal, where it stands (status +Current state), and the Next steps.
large or destructive action (consistent with this being a deliberate, controlled handoff).
Keep this format identical to the Claude Code side so either tool can read it.
---
tool: codex
model: <model name, e.g. gpt-5.5>
timestamp: <ISO 8601, e.g. 2026-06-02T14:30:00Z>
cwd: <absolute project path>
git_branch: <branch or "n/a">
git_commit: <short sha or "n/a">
status: in_progress | blocked | done
---
# Handoff: <one-line task title>
## Goal
<what we're ultimately trying to achieve>
## Done so far
- <completed work and key decisions, in order>
## Current state
<what works, what's broken/partial, files touched (paths)>
## Next steps
1. <ordered, concrete, actionable — the receiving tool starts here>
## Key files & references
- `path/to/file` — <why it matters>
## Open questions / gotchas
- <blockers, assumptions, things that bit us>
## How to verify / run
<commands to build/test/run and confirm state>~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.