omh-deploy-and-monitor
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from deployment health signals and monitoring blueprints which could contain malicious instructions.
- Ingestion points: Reads release scope, environment details, health signals, and outputs from
omh-automation-blueprintcron jobs (hermes cron runs,hermes cron incidents) withinSKILL.md. - Boundary markers: No explicit delimiters or boundary markers are defined to isolate external data from the agent's instructions.
- Capability inventory: Employs the
omhCLI for runtime recording and performs internal file lookups via theskill_viewfunction. - Sanitization: Lacks evidence of sanitization or validation for ingested external health metrics or signal outputs before they are processed by the agent.
- [COMMAND_EXECUTION]: The skill utilizes the
omhCLI tool for managing and recording the deployment lifecycle. - Evidence: Invokes
omh runtime recordwith specific flags to track workflow progress and status.
Audit Metadata