ulw-loop
Warn
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill's bootstrap script in
references/full-workflow.mddynamically searches for and executes a JavaScript file (cli.js) located within a plugin cache directory ($HOME/.codex/plugins/cache/sisyphuslabs/omo/...). This represents dynamic loading and execution from computed paths. - [COMMAND_EXECUTION]: The skill frequently executes shell commands via the
omoCLI and provides a wrapper function in the bootstrap script to facilitate this execution. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to install dependencies using
npx lazycodex-ai installif the required CLI is not found. While this is a user-facing instruction, it references a third-party package. - [INDIRECT_PROMPT_INJECTION]: The skill ingests arbitrary user-provided 'briefs' which are then used to generate instructions for subagents.
- Ingestion points: The
create-goalscommand accepts a--briefor--brief-fileargument (documented inreferences/full-workflow.md). - Boundary markers: The skill uses structural markers like
TASK:,DELIVERABLE,SCOPE, andVERIFYto delineate subagent tasks, though these are not cryptographic boundaries. - Capability inventory: The skill has the ability to spawn subagents, execute shell commands, and perform git operations via
git-master. - Sanitization: There is no evidence of explicit sanitization or filtering of the input brief before it is processed and passed to subagents.
Audit Metadata