ralph
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for project building, dependency installation, and running test suites using standard tools like npm, pip, cargo, and make.
- [EXTERNAL_DOWNLOADS]: The skill automates the retrieval of software packages and Docker images from official public registries.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core operational logic. \n
- Ingestion points: The agent reads and follows instructions, user stories, and acceptance criteria from prd.json and progress.txt. \n
- Boundary markers: No explicit boundary markers or "ignore instructions" warnings are used when processing content from these files. \n
- Capability inventory: The skill has the ability to execute arbitrary shell commands, write to the file system, and delegate tasks to other specialist agents. \n
- Sanitization: No validation or sanitization of the content within the PRD or progress files is performed before the agent interprets it as instructional logic.
Audit Metadata