oma-recap

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the oma recap CLI and jq to read and process local conversation history records.
  • [PROMPT_INJECTION]: The skill processes untrusted historical conversation data which creates a surface for indirect prompt injection.
  • Ingestion points: Accesses conversation data from ~/.claude/history.jsonl and the output of oma recap --json.
  • Boundary markers: No delimiters are defined to separate ingested history content from the agent's system instructions.
  • Capability inventory: The skill writes summary reports in Markdown format to the .agents/results/recap/ directory.
  • Sanitization: No validation or sanitization of the input history content is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 06:55 AM
Security Audit — agent-trust-hub — oma-recap