{
  "schemaVersion": 1,
  "skillId": "mattpocock-handoff",
  "revision": "49dd158d1076134a641b33efb035946536778336",
  "runAt": "2026-10-19",
  "mode": "source-review",
  "summary": "Completed 5 bounded source checks covering requirements, workflow boundaries and practical security concerns. No skill workflow was executed.",
  "sourceManifest": [
    {
      "path": "skills/productivity/handoff/SKILL.md",
      "sha256": "4cbb043950dad2ffd3662ff1a5a0b51ae676004b5cae10e3787e8ee7a4ee69d3",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/skills/productivity/handoff/SKILL.md"
    },
    {
      "path": "LICENSE",
      "sha256": "0e7ac423bf2c6e223b7c5b156f8cf72da49d748e56a1641402c31f22ad07dbb5",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/LICENSE"
    }
  ],
  "cases": [
    {
      "id": "explicit-invocation",
      "method": "source-review; exact source condition checked, no workflow executed",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/skills/productivity/handoff/SKILL.md",
      "expected": "disable-model-invocation: true",
      "observed": "The frontmatter requests explicit invocation; whether a host honors that field was not tested.",
      "passed": true
    },
    {
      "id": "temporary-output",
      "method": "source-review; exact source condition checked, no workflow executed",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/skills/productivity/handoff/SKILL.md",
      "expected": "Save to the temporary directory of the user's OS",
      "observed": "Output is directed to an OS temporary directory, outside the current project.",
      "passed": true
    },
    {
      "id": "existing-artifact-references",
      "method": "source-review; exact source condition checked, no workflow executed",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/skills/productivity/handoff/SKILL.md",
      "expected": "Reference them by path or URL instead.",
      "observed": "The source prefers references to existing artifacts over duplicated content.",
      "passed": true
    },
    {
      "id": "sensitive-data-redaction",
      "method": "source-review; exact source condition checked, no workflow executed",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/skills/productivity/handoff/SKILL.md",
      "expected": "Redact any sensitive information",
      "observed": "The source requests redaction but supplies no deterministic scanner or redaction validator.",
      "passed": true
    },
    {
      "id": "next-session-focus",
      "method": "source-review; exact source condition checked, no workflow executed",
      "sourceUrl": "https://github.com/mattpocock/skills/blob/49dd158d1076134a641b33efb035946536778336/skills/productivity/handoff/SKILL.md",
      "expected": "tailor the doc accordingly.",
      "observed": "Arguments guide the handoff toward the next session rather than a generic transcript summary.",
      "passed": true
    }
  ],
  "results": {
    "passed": 5,
    "failed": 0,
    "total": 5
  },
  "findings": [
    {
      "severity": "high",
      "title": "Redaction is an instruction, not a control",
      "detail": "The guide tells the model to remove secrets and personal information but has no scanner or validator. Review a handoff before moving it to another agent or storage system."
    },
    {
      "severity": "attention",
      "title": "Temporary paths do not make a durable handoff",
      "detail": "The requested OS temporary location can be cleaned up or unavailable to another machine. Copy an approved handoff into the intended durable project location before relying on it."
    },
    {
      "severity": "attention",
      "title": "References and suggested skills need rechecking",
      "detail": "A receiving agent may lack referenced files or may load a different skill version. Verify access and inspect suggested skills before following them."
    }
  ],
  "limitations": [
    "Instruction-only entrypoint: no handoff was written from real conversation data and no fresh-agent continuation or redaction test was run.",
    "Temporary-folder persistence, file permissions, path portability and host support for invocation metadata were not tested."
  ],
  "methodology": "Each source check records the exact source condition and the scoped observation it supports. Counts measure reviewed conditions, not completed user tasks, security assurance or model effectiveness."
}