skills/rlaope/oh-my-hermes/omh-doctor/Gen Agent Trust Hub

omh-doctor

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the omh command-line utility to perform diagnostic checks and environment repairs (e.g., omh doctor, omh setup). These operations are consistent with the skill's stated purpose of maintaining installation health.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied error messages and environment state as part of its diagnostic workflow. This represents an attack surface where maliciously crafted input could attempt to redirect the agent's logic.
  • Ingestion points: User-provided descriptions of issues and local environment metadata.
  • Boundary markers: The skill advocates for "explicit proof boundaries" when grouping diagnostic evidence, which provides some structural separation but does not fully isolate the agent from embedded instructions in the data.
  • Capability inventory: The skill is authorized to execute omh CLI commands and read local configuration files.
  • Sanitization: There are no explicit instructions for the agent to sanitize or escape user-provided issue descriptions before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 12:35 AM