lazycodex-agent-harness
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
oh-my-openagentpackage from a third-party GitHub repository (code-yeongyu/oh-my-openagent) and thelazycodex-aipackage from the npm registry usingnpxduring the setup phase. - [REMOTE_CODE_EXECUTION]: The installation process executes code downloaded at runtime from external sources to configure the local environment and set up command aliases.
- [COMMAND_EXECUTION]: The skill implements an autonomous coding loop (
$ulw-loop) that executes arbitrary shell commands and provides a mechanism for the agent to run scripts directly via the$commandsyntax. It also includes tools likeAST-grepandLSPthat interact with the system shell. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it hierarchically ingests context from
AGENTS.mdandrulesfiles within the project repository. - Ingestion points: Hierarchical
AGENTS.mdfiles generated by/init-deepand existing projectrulesfiles. - Boundary markers: No explicit delimiters or instructions are used to distinguish project data from agent instructions; content in context files is treated as authoritative guidance.
- Capability inventory: The agent has the capability to write to the file system (
/init-deep), execute shell commands ($ulw-loop), and perform multi-agent orchestration. - Sanitization: The skill does not perform sanitization or validation of the content processed from project context files.
Audit Metadata