ralph
Fail
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to install software extensions from external GitHub repositories (
Q00/ouroborosandsupercent-io/skills-template) that are not recognized as trusted vendors or well-known services. - [REMOTE_CODE_EXECUTION]: Setup instructions include the use of
npx skills addwith a remote repository URL, which involves downloading and executing third-party code. Additionally, the skill architecture for platforms like Claude Code and Gemini CLI relies on installing remote plugins and extensions that execute logic within the agent's environment. - [COMMAND_EXECUTION]: The provided
setup-codex-hook.shscript executes shell commands to modify the local~/.codex/config.tomlfile, injecting persistent command contracts into the developer instructions. The installation process for Gemini CLI also involves configuringAfterAgenthooks that execute a shell script (ralph-check.sh) after every response, establishing a persistent command execution loop. - [PROMPT_INJECTION]: The skill implements a persistent 'Ralph' mode that instructs the agent to continue iterating autonomously until internal verification passes. This logic is designed to override standard interaction boundaries and session constraints by enforcing a continuous execution loop.
Recommendations
- AI detected serious security threats
Audit Metadata