Auto Handoff is a skills-only plugin. It has no MCP server, network client, telemetry, account access, or credential requirement.

The skill explicitly excludes secrets, credentials, raw private content, transient logs, and speculative personal information from long-term memory candidates. Workspace state is written only when the active host provides a writable workspace.

To report a security issue, open a private security advisory in the GitHub repository rather than a public issue.