mom-status
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from the
mom statuscommand, creating a potential vector for indirect instructions if the tool output is manipulated. - Ingestion points: The agent reads and processes the output of the
mom statuscommand as described inSKILL.md. - Boundary markers: The skill does not define specific delimiters to wrap the tool output, though it does instruct the agent to summarize rather than print raw output.
- Capability inventory: The skill utilizes the
Bashtool to execute status and setup commands. - Sanitization: The instructions explicitly require the agent to redact sensitive fields such as keys, tokens, and passwords using
[REDACTED]and to summarize the output, which significantly mitigates the risk of data exposure. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
momCLI tool from a remote repository via Homebrew. - Evidence: It suggests the command
brew install momhq/tap/momand references the source athttps://github.com/momhq/mom. The resource belongs to the skill's vendor and the instructions explicitly forbid installation without user consent. - [COMMAND_EXECUTION]: The skill relies on shell commands to manage its environment and query its state.
- Evidence: Uses
command -v momfor path verification andmom statusfor operational reporting.
Audit Metadata