oma-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
omaCLI for workflow management, including commands such asoma state emitto record decisions,oma state verifyfor checkpointing,oma diagram resolvefor architectural visualization, andoma agent spawnfor cross-agent consultation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user's codebase and documentation to perform architecture reviews. The results of this analysis are used to construct arguments for shell commands, which presents a surface for potential injection if malicious content in the processed files influences the generated recommendation.
- Ingestion points: The skill reads source files and documentation within the
CODEBASEscope. - Boundary markers: No explicit delimiter or "ignore" instructions are defined for the reading of external codebase files.
- Capability inventory: The skill has the ability to execute shell commands via the
omaCLI and perform file system writes to the.agents/results/architecture/directory. - Sanitization: There are no explicit instructions to escape or validate data derived from the codebase before it is interpolated into shell command templates like
oma state emit. - [EXTERNAL_DOWNLOADS]: The skill's
oma diagram resolvecommand is documented to automatically fetch the latest release of thearchifydiagram engine when it is selected for architectural visualization. This is a standard update mechanism for the vendor's platform tools.
Audit Metadata