ralphmode
Warn
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides shell script templates (
ralph-safety-check.shandralph-tier1-check.sh) inreferences/permission-profiles.mdand instructs the user to save them locally and configure platform-specific hooks to execute them at runtime. - [INDIRECT_PROMPT_INJECTION]: The provided safety scripts are designed to ingest and analyze untrusted data (command strings generated by the AI agent) during execution.
- Ingestion points: The safety scripts in
references/permission-profiles.mdread from theCLAUDE_TOOL_INPUTenvironment variable andstdin. - Boundary markers: The instructions recommend project-local configuration files (
.claude/settings.json,config.toml) to limit the scope of automation. - Capability inventory: The scripts utilize
bash,python3, andgrepto evaluate commands. - Sanitization: The scripts implement regex-based filtering to identify and block a list of Tier 1 dangerous operations.
- [COMMAND_EXECUTION]: The skill guides the user to configure platform hooks such as
PreToolUseandBeforeToolto execute arbitrary local shell scripts. - [PRIVILEGE_ESCALATION]: Instructions in
references/permission-profiles.mddirect the user to applychmod +xto the generated scripts to enable their execution on the system.
Audit Metadata