H

Handoff

yourakshaw/handoff · unreleased source · 9bc9e0c · Agent Skills

by YourAKShawOwner verifiedScan grade: Good

Agent skill that saves and resumes coding sessions across agents using a repository-root HANDOFF.md with goals, constraints, and next steps

InstallSource
Follow0
Trust Score82Security scan86Components1
Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Handoff a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Agent Skills
  • 1 skill

Before you install

Sign-in
Not declared
Declared access
Not declared
License
Not declared

Check before relying on it

  • Some security checks did not finish: Cisco skill scan. See the evidence
  • No license declared in the manifest.

What is Handoff?

Handoff is a published agent skills plugin for AI coding agents in the Agent Skills ecosystem, developed by YourAKShaw and distributed through the HOL AI plugin registry. Agent skill that saves and resumes coding sessions across agents using a repository-root HANDOFF.md with goals, constraints, and next steps.

Canonical slug
yourakshaw/handoff
Version
unreleased source · 9bc9e0c · updated Nov 3, 2026

Registry snapshot

Owner verification
Verified on HOL as @YourAKShaw
Scanner
HOL plugin scanner
Security result
Needs review
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified
82

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
65/100
MCP server setup
100/100
Plugin Security
86/100
Provenance
80/100
Publisher Quality
100/100

Provenance

Plugin root
.
Source repo
https://github.com/YourAKShaw/handoff
Source commit
9bc9e0c586b0…
Publisher verified
Yes
Owner verified
@YourAKShaw
Agent Plugins 1.0
Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge detected

The source repository README links to this HOL listing. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed
Needs review
Security result
86
Security score
0
High findings
Provider
codex-plugin-scanner
Grade
B · Good
Version
3.24.2
cisco-skill-scanner: failedcisco-mcp-scanner: skipped

Manifest Validation

21/31

9 checks

Security

16/16

9 checks

Operational Security

17/17

5 checks

Best Practices

9/12

5 checks

Marketplace

N/A

3 checks · not applicable

Skill Security

5/5

4 checks

Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

infomanifest-validationPLUGIN_JSON_RECOMMENDED_AUTHOR

The manifest is missing the documented recommended field "author".

Add "author" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_LICENSE

The manifest is missing the documented recommended field "license".

Add "license" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_RECOMMENDED_KEYWORDS

The manifest is missing the documented recommended field "keywords".

Add "keywords" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Source

Install from a native release archive or the assessed source revision.

Install guide
  1. 1

    Download the release archive

    Use a published GitHub release archive. The catalog version is the package version at the assessed commit.

    shell
  2. 2

    Follow the publisher install guide

    https://github.com/YourAKShaw/handoff/blob/9bc9e0c586b06a4469bec807a3fcdf6c739e48f4/docs/INSTALL.md

Did setup work in Source?

No setup reports for Source yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W45, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "handoff",
  "version": "0.0.0",
  "description": "Agent skill that saves and resumes coding sessions across agents using a repository-root HANDOFF.md with goals, constraints, and next steps",
  "repository": "https://github.com/YourAKShaw/handoff",
  "homepage": "https://github.com/YourAKShaw/handoff",
  "interface": {
    "displayName": "Handoff",
    "developerName": "YourAKShaw",
    "category": "Agent Skills"
  },
  "skills": "./",
  "holManifestOrigin": "synthesized",
  "registryIndexVersion": 9
}

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • handoff

    SKILL.md

    Save or resume a session handoff in HANDOFF.md at the repository root, so the next session with any AI agent continues from exactly where this one stopped. Use when the user types /handoff, says "handoff", "update the handoff", "wrap up", "save where we are", or asks to continue from the last session.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.codex-plugin/plugin.json

plugin-manifest

462 bytes

650c2a8de9268172…

.github/CONTRIBUTING.md

file

5,189 bytes

2dd92c751b5ee669…

.github/dependabot.yml

file

170 bytes

ff7bbaa3fb4662c2…

.github/ISSUE_TEMPLATE/01-bug-report.yml

file

1,440 bytes

bc781696e20b26d2…

.github/ISSUE_TEMPLATE/02-improvement.yml

file

1,161 bytes

719e6b0c784e6598…

.github/ISSUE_TEMPLATE/03-documentation.yml

file

697 bytes

93303774769c7f11…

.github/ISSUE_TEMPLATE/config.yml

file

232 bytes

2f286cc038574ca6…

.github/pull_request_template.md

file

927 bytes

fb857ce4aa244d5c…

.github/scripts/lint-commit.py

file

10,973 bytes

4150d4e3e5d2125c…

.github/SUPPORT.md

file

830 bytes

fa6cfabeb4ae819c…

.github/workflows/validate.yml

file

2,261 bytes

196bf20faf8e6fd6…

assets/agent-instructions-snippet.md

asset

1,511 bytes

c9acb91cd5799c1c…

assets/handoff-template.md

asset

1,157 bytes

a6cfe7167a654956…

LICENSE

file

1,432 bytes

27f5afbe1a47cb57…

README.md

file

7,579 bytes

6f55405a2d0ea712…

README.md

file

7,579 bytes

6f55405a2d0ea712…

references/agent-setup.md

file

2,438 bytes

af1ed2831d925726…

references/handoff-format.md

file

2,085 bytes

d2d843bf962632f2…

references/what-to-capture.md

file

1,890 bytes

025acbbe6a88c467…

scripts/test_validate_skill.py

file

8,892 bytes

88048e61987e7813…

scripts/validate-skill.py

file

12,760 bytes

d2e78efea0b99be8…

scripts/validate-skill.sh

file

642 bytes

c4f8cf2f037555c5…

SECURITY.md

file

1,924 bytes

b0e5c646bbec970f…

SKILL.md

skill

3,486 bytes

c107ed502c77823d…

workflows/bootstrap-repository.md

file

1,367 bytes

173799f3f251ee63…

workflows/resume-handoff.md

file

1,361 bytes

da2fd410993d586f…

workflows/save-handoff.md

file

1,768 bytes

15e6bea90fe5d322…

Handoff — Frequently asked questions

What is Handoff?
Handoff is an AI plugin in the HOL registry. Agent skill that saves and resumes coding sessions across agents using a repository-root HANDOFF.md with goals, constraints, and next steps.
How do I install Handoff?
Install Handoff in your harness: Source — https://github.com/YourAKShaw/handoff/releases; Any agent — npx [email protected] add YourAKShaw/handoff. Full step-by-step guidance is on the HOL plugin page.
How do I install Handoff in Source?
To install Handoff in Source, start with https://github.com/YourAKShaw/handoff/releases. The complete step-by-step install guide for Source is on the HOL plugin page.
How is the Trust Score for Handoff computed?
Handoff has a HOL Trust Score of 82 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/yourakshaw%2Fhandoff/trust
Who publishes Handoff?
Handoff is published by YourAKShaw and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W45. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars
<5
From HOL's GitHub snapshots of the repository, 2026-11-04 to 2026-11-11.

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Handoff.

Alternatives in Agent Skills

See all Agent Skills plugins

More from YourAKShaw

Reviews and similar plugins