omx-setup
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions guide the agent to execute a local setup script (
./omw) or the CLI entry point (node lib/cli.js). This is standard behavior for infrastructure setup and installation tasks. - [INDIRECT_PROMPT_INJECTION]: The skill manages and merges content within the
AGENTS.mdfile, which may contain user-provided instructions. - Ingestion points: Reads
AGENTS.mdfrom the project root during the setup process. - Boundary markers: The skill explicitly uses markers (
<!-- OMW:AGENTS:START -->and<!-- OMW:AGENTS:END -->) to delimit managed content, which helps prevent the agent from misinterpreting user-authored text as system instructions. - Capability inventory: The skill performs directory creation and file writes in the project and user home directories (
SKILL.md). - Sanitization: No explicit sanitization of existing
AGENTS.mdcontent is described; however, the use of structural markers is a recognized safety practice for managing shared configuration files.
Audit Metadata