oma-recap
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
oma recapCLI andjqto read and process local conversation history records. - [PROMPT_INJECTION]: The skill processes untrusted historical conversation data which creates a surface for indirect prompt injection.
- Ingestion points: Accesses conversation data from
~/.claude/history.jsonland the output ofoma recap --json. - Boundary markers: No delimiters are defined to separate ingested history content from the agent's system instructions.
- Capability inventory: The skill writes summary reports in Markdown format to the
.agents/results/recap/directory. - Sanitization: No validation or sanitization of the input history content is mentioned.
Audit Metadata