ralph-loop
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
ralphCLI and standard shell utilities (jq,grep,sed,ls) to manage loop states, inspect logs, and process diagnostic data. - [INDIRECT_PROMPT_INJECTION]: The skill processes data generated by other agent loops, which creates an attack surface for indirect prompt injection.
- Ingestion points: The skill reads loop logs, history, diffs, and diagnostic artifacts such as
agent-output.jsonlandprompt-log.md(documented inSKILL.mdandreferences/diagnostics.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the processed logs are specified.
- Capability inventory: The skill can execute various
ralphCLI commands (run,merge,resume,retry) based on the data it inspects. - Sanitization: The instructions do not specify any sanitization or validation of the content retrieved from loop logs or diagnostic files before it is processed by the agent.
Audit Metadata