package-rama-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
greenscript dynamically loads and executes Clojure code at runtime usingbabashka.deps/add-deps. It allows overriding the source locations for its dependencies (rama,green,once) via environment variables likeRAMA_LIB_ROOT, enabling execution from dynamically computed local or remote paths. - [EXTERNAL_DOWNLOADS]: The skill downloads code dependencies from the author's GitHub repositories (
github.com/getcolors/rama.git,github.com/getcolors/green.git, andgithub.com/getcolors/once.git). These resources trace back to the skill author's infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes user-provided configuration to drive infrastructure operations.
- Ingestion points: Configuration data is read from
colors.ymland environment variables (overlaid viaCOLORS_PAR_*as described ingreen). - Boundary markers: None explicitly defined in the provided files to delimit the configuration data within the agent's context.
- Capability inventory: The skill can create and delete resources on DigitalOcean, manage DNS records on Cloudflare, configure SMTP through Resend, and execute the Rama CLI.
- Sanitization: Validation logic is mentioned as residing in the
ramalibrary, though not visible in the provided launcher script.
Audit Metadata