cancel-ralph
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
rm -rfcommand to delete the.cursor/ralphdirectory. This action is the primary intended function of the skill to stop a running loop and clean up temporary state files. - [INDIRECT_PROMPT_INJECTION]: The skill reads the
iteration:field from.cursor/ralph/scratchpad.md, which is a project-local file. - Ingestion points: Data is read from
.cursor/ralph/scratchpad.md(SKILL.md). - Boundary markers: None present for the file content ingestion.
- Capability inventory: The skill executes
rm -rfto delete the local state directory. - Sanitization: No specific validation is mentioned for the iteration count extracted from the file. The risk is considered minimal because the data is only used for a status report and the directory is immediately deleted.
Audit Metadata