yangshu2087/agent-handoff-governor
.agents/skills/agent-handoff-governor/SKILL.md
Use when handing work between Codex, Cursor, or other agents, before pausing or switching tools, to refresh docs/agent-handoff.md with branch, changed files, verification evidence, and an explicit next step.
tools
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add yangshu2087/Codex agent-handoff-governorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:35 PM23.2s1 file scanned
SKILL.md
- name:
- agent-handoff-governor
- description:
- Use when handing work between Codex, Cursor, or other agents, before pausing or switching tools, to refresh docs/agent-handoff.md with branch, changed files, verification evidence, and an explicit next step.
Agent Handoff Governor
Use this skill whenever execution is about to move across tools or agents.
When to use
Trigger this skill when you are:
- pausing work for later,
- handing work from Codex to Cursor (or reverse),
- asking another agent to continue,
- opening a PR after multi-tool edits and you want a clean baton file.
Required workflow
- Confirm the target repository root first (
git rev-parse --show-toplevel). - Refresh handoff with:
/Users/yangshu/Codex/scripts/update-agent-handoff.sh <repo-path>
- If verification was run, record it in the same refresh call:
--verify "<command>"- optional context with
--note "<reason or caveat>"
- Re-open
docs/agent-handoff.mdand ensure these sections are updated:BranchChanged filesVerification
- Preserve human-authored sections (
Current goal,Done,Next step,Blockers) and make sureNext stepis concrete and executable.
Command patterns
/Users/yangshu/Codex/scripts/update-agent-handoff.sh /absolute/repo/path
/Users/yangshu/Codex/scripts/update-agent-handoff.sh /absolute/repo/path --verify "npm test"
/Users/yangshu/Codex/scripts/update-agent-handoff.sh --repo . --verify "pnpm -C web test" --note "UI snapshot update pending review"
Guardrails
- Never claim handoff complete without a refreshed
docs/agent-handoff.md. - Never overwrite human summary sections with generated boilerplate.
- If no verification was run, explicitly keep that fact in
Verificationinstead of inventing results.
Related Skills
yangshu2087/terrashark
development
VerifiedTrustedCommunity
Use when explicitly reviewing, generating, refactoring, or migrating Terraform/OpenTofu IaC and checking failure modes such as identity churn, secrets, blast radius, CI drift, or compliance gates.
SKILL.mdUpdated Apr 16, 2026
yangshu2087/stitch-ui-prompt-architect
development
VerifiedTrustedCommunity
Use when the user explicitly mentions Google Stitch and wants a structured Stitch-ready UI prompt or prompt refinement from rough product/design ideas.
SKILL.mdUpdated Apr 16, 2026
yangshu2087/stitch-react-components
development
VerifiedTrustedCommunity
Use when the user explicitly mentions Google Stitch and asks to convert Stitch designs into Vite, CRA, or generic React components.
SKILL.mdUpdated Apr 16, 2026
yangshu2087/stitch-nextjs-components
development
VerifiedTrustedCommunity
Use when the user explicitly mentions Google Stitch and asks to convert Stitch designs into Next.js App Router components.
SKILL.mdUpdated Apr 16, 2026