CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
HandoffSkill
Summary
Compress the current Claude Code session into a portable handoff document so a fresh agent can continue the work without re-reading the whole conversation.
Features
- Summarises the session into a handoff doc for another agent to resume
- Writes to the OS temp directory, never the workspace
- References specs, plans, issues and diffs by path instead of duplicating them
- Adds a 'suggested skills' section for the next agent
- Redacts API keys, passwords and PII automatically
Install This Skill
Add this skill to your favorite AI agent in a few steps.
Skill Content
Description
Handoff is a lightweight Claude Code skill from TypeScript educator Matt Pocock that compresses your current session into a portable handoff document so a fresh agent — or a teammate — can pick the work up without re-reading the whole conversation. On invocation it writes a concise summary to the OS temporary directory (never the workspace), references existing artifacts like specs, plans, ADRs, issues and diffs by path instead of duplicating them, and adds a "suggested skills" section naming which skills the next agent should load.
It is built for long or context-heavy sessions where you want to delegate, resume after a reset, or split a task across agents while keeping token usage down. It automatically redacts secrets and PII from the summary, and accepts an argument describing what the next session will focus on so the document is tailored to the continuation. Part of Matt Pocock's open-source skills collection, MIT licensed and installable with npx skills add mattpocock/skills skill=handoff.
Related Skills
Microsoft's official Playwright skill — drives a real browser from the command line using accessibility snapshots and element refs, and plans, generates and heals Playwright tests.
Google's official agent skill for writing production Maps Platform code — grounded in freshly fetched docs, with a demo key path that needs no billing account.
Railway's official agent skill: create projects, provision databases and buckets, deploy, manage variables and domains, and read build failures back — from the CLI, API or MCP server.