oma-coordination
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
omaCLI and local shell scripts likespawn-agent.shto coordinate tasks across different agents. This is an essential part of the manual coordination workflow described. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection where untrusted user requirements are passed as arguments to shell commands. Ingestion points: User-provided task descriptions and project requirements enter the workflow as described in
SKILL.mdandresources/examples.md. Boundary markers: None are present; user input is directly interpolated into command strings likeoma agent:spawn. Capability inventory: The workflow relies on subprocess execution capabilities to run CLI tools. Sanitization: The skill instructions do not include any steps for validating or sanitizing the strings provided by the user before they are used in the command line.
Audit Metadata