ralph
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill defines autonomous development cycles that execute shell scripts (loop.sh, setup-loop.sh, stop-hook.sh). These references are part of the functional infrastructure for build loops and project scaffolding described in SKILL.md.
- [PROMPT_INJECTION]: The toolkit processes external project data and specifications, which constitutes a surface for indirect prompt injection. Evidence chain: 1. Ingestion points: Project source code and user-written specifications (SKILL.md). 2. Boundary markers: Absent from documentation. 3. Capability inventory: Execution of local scripts and autonomous build loops (SKILL.md). 4. Sanitization: Absent. No malicious instructions were detected in the skill file itself.
Audit Metadata