omh-docs
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various
omhCLI commands, such asomh list,omh doctor, andomh status, to retrieve information about the local installation. These commands are part of the OMH vendor toolkit. The skill specifically instructs the agent to disclose the side effects of diagnostic commands likeomh doctorbefore execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including GitHub repository files and local tool outputs. It implements defensive measures by instructing the agent to treat external content as evidence rather than instruction sources and to ignore any embedded prompts or commands within retrieved documents.
- Ingestion points: Files retrieved from the
rlaope/oh-my-hermesGitHub repository and the output ofomhCLI commands. - Boundary markers: Instructions are present to clearly label and separate public product facts from local installation facts and to cite specific versions or commits.
- Capability inventory: The skill uses subprocess calls to run the
omhCLI suite and performs file system reads within the OMH home directory (~/.omh). - Sanitization: The skill contains explicit rules forbidding the reading or printing of credentials, tokens, or
.envfiles, and it mandates ignoring instructions found within fetched documentation.
Audit Metadata