omarchy

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill instructs the agent to rely on local script headers for operational guidance (e.g., 'inspect its file/header comments first' and 'Read top-of-file script comments for likely candidates'). This creates an indirect prompt injection surface where a malicious actor with the ability to modify local files in /home/achals/.local/share/omarchy/bin could embed instructions that override intended behavior.
  • Ingestion points: Headers and comments within script files located in /home/achals/.local/share/omarchy/bin.
  • Boundary markers: Absent. The agent is encouraged to treat the custom script comments as authoritative for determining the script's purpose.
  • Capability inventory: Extensive system management capabilities including package installation (omarchy-pkg-install), system updates (omarchy-update), and privilege-related tasks (omarchy-reset-sudo).
  • Sanitization: Absent.
  • [COMMAND_EXECUTION]: The skill defines a massive catalog of 161 custom scripts (omarchy-*) for system administration. While it mandates safety protocols (status checks first, explicit confirmation for writes), it grants the agent authority to interact with a broad range of system services, including firmware updates, drive password settings, and package managers.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 08:23 AM