omh-idea-to-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user inputs (product ideas, success metrics, and customer signals) to generate foundational repository files such as
AGENTS.mdandREADME.md. These files act as persistent instructions for any AI agent interacting with the repository in the future. - Ingestion points:
SKILL.mdidentifies 'product idea', 'target user or customer signal', and 'repo or app context' as required inputs provided by the user. - Boundary markers: There are no explicit instructions to use delimiters or 'ignore embedded instructions' warnings when incorporating user-provided content into project files.
- Capability inventory: The skill performs file system writes to create project scaffolding and executes git commands.
- Sanitization: The instructions lack specific requirements for sanitizing or escaping external content before it is written to documentation files.
- [COMMAND_EXECUTION]: The skill utilizes shell commands for repository initialization and internal lifecycle tracking.
- Evidence:
SKILL.mdcontains the commandomh runtime record --skill idea-to-deploy --harness app-delivery-loop --status startedto log workflow progress. - Evidence:
references/project-bootstrap.mdspecifies the execution ofgit initto set up version control andgit status --shortto verify the state of the repository.
Audit Metadata