omh-agent-ops-review
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a strong security posture by defining explicit boundaries between 'prepared' (AI-generated) guidance and 'observed' (system-verified) evidence. This prevents the agent from making false or deceptive claims about the state of external systems.
- [SAFE]: The documentation in
references/instrumentation-ladder.mdidentifies logging of secret values and full prompt/response bodies as critical anti-patterns, promoting secure observability practices. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided requests and target context, creating a standard surface for indirect prompt injection.
- Ingestion points:
SKILL.mdidentifiesuser requestandtarget contextas required inputs. - Boundary markers: The skill explicitly mandates the use of
not-evidence boundariesandprepared-vs-observed boundaryin its outputs. - Capability inventory: The skill utilizes a shell-based tool (
omh runtime record) for recording workflow status. - Sanitization: No explicit sanitization or escaping logic is defined in the provided instructions.
Audit Metadata