skills/cursor/plugins/cancel-ralph/Gen Agent Trust Hub

cancel-ralph

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the rm -rf command to delete the .cursor/ralph directory. This action is the primary intended function of the skill to stop a running loop and clean up temporary state files.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads the iteration: field from .cursor/ralph/scratchpad.md, which is a project-local file.
  • Ingestion points: Data is read from .cursor/ralph/scratchpad.md (SKILL.md).
  • Boundary markers: None present for the file content ingestion.
  • Capability inventory: The skill executes rm -rf to delete the local state directory.
  • Sanitization: No specific validation is mentioned for the iteration count extracted from the file. The risk is considered minimal because the data is only used for a status report and the directory is immediately deleted.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:42 AM