ultragoal
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its core workflow.
- Ingestion points: The skill reads and decomposes instructions from the file
.omw/ultragoal/brief.mdto drive the task execution loop. - Boundary markers: There are no explicit delimiters or safety instructions provided to the agent to distinguish between the brief's data and the skill's operational logic.
- Capability inventory: The skill is authorized to execute shell commands (for verification), manipulate task lists (
TaskCreate,TaskUpdate), and modify files (Write,Edit). - Sanitization: The brief's content is not sanitized or validated before being processed by the agent.
- [COMMAND_EXECUTION]: The skill instructs the agent to run project-specific shell commands for verification, such as
npm test, build, and lint commands. While this is a standard feature for development tools, it represents a capability that could be exploited if a malicious brief triggers harmful commands during the automated loop.
Audit Metadata