omh-content-operator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a shell command snippet
omh runtime recordto log the workflow status. This command is an internal tool used within the Hermes system for state tracking and orchestration. - [INDIRECT_PROMPT_INJECTION]: As a content operation skill, it is designed to ingest and process user-provided text. The skill implements several mitigation strategies including:
- Ingestion points: Processes
user request,target context, andsource scopedefined in SKILL.md. - Boundary markers: Includes explicit instructions for
prepared-vs-observedboundaries andnot-evidenceboundaries to prevent the AI from confusing instructions with execution facts. - Capability inventory: Limited to executing the internal
omhruntime logging tool. - Sanitization: Utilizes a
no-invention rule,hallucination gates, and requirements for citations to validate source-backed content creation.
Audit Metadata