ralph-loop
Fail
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
templates/loop.shscript executes theclaudeCLI tool with the--dangerously-skip-permissionsflag. This explicitly bypasses security guardrails designed to prevent unauthorized shell command execution or file system modifications without user approval. - [DATA_EXFILTRATION]: The
templates/loop.shscript automatically executesgit push origin "$CURRENT_BRANCH"after every iteration of the AI loop. This behavior can lead to the silent exfiltration of sensitive data, configuration files, or credentials if the AI agent commits them to the repository during its build process. - [PROMPT_INJECTION]: The
templates/PROMPT_build.mdandtemplates/PROMPT_plan.mdfiles contain instructions that encourage the use of massive amounts of parallel subagents (up to 500) and directives like 'Ultrathink' or specific model overrides. While primarily operational, these instructions attempt to dictate high-level agent architecture and resource consumption in a way that could overwhelm local resources or bypass typical agent constraints. - [EXTERNAL_DOWNLOADS]: The
REFERENCE.mdfile points to an external GitHub repository (https://github.com/ClaytonFarr/ralph-playbook). While documented as a reference, the skill is designed to bootstrap a project using templates derived from this external methodology, creating a dependency on third-party logic for core execution flow.
Recommendations
- AI detected serious security threats
Audit Metadata