package-rama-green

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The green script dynamically loads and executes Clojure code at runtime using babashka.deps/add-deps. It allows overriding the source locations for its dependencies (rama, green, once) via environment variables like RAMA_LIB_ROOT, enabling execution from dynamically computed local or remote paths.
  • [EXTERNAL_DOWNLOADS]: The skill downloads code dependencies from the author's GitHub repositories (github.com/getcolors/rama.git, github.com/getcolors/green.git, and github.com/getcolors/once.git). These resources trace back to the skill author's infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes user-provided configuration to drive infrastructure operations.
  • Ingestion points: Configuration data is read from colors.yml and environment variables (overlaid via COLORS_PAR_* as described in green).
  • Boundary markers: None explicitly defined in the provided files to delimit the configuration data within the agent's context.
  • Capability inventory: The skill can create and delete resources on DigitalOcean, manage DNS records on Cloudflare, configure SMTP through Resend, and execute the Rama CLI.
  • Sanitization: Validation logic is mentioned as residing in the rama library, though not visible in the provided launcher script.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 02:04 PM