omh-ops-review
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides instructions for a standard operational review process. It does not contain any prompt injections, obfuscation, or attempts to exfiltrate data.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external 'status evidence'. It includes built-in mitigations by instructing the agent to tie every claim to observed evidence, mark missing information as unknown, and maintain clear boundaries between observed facts and follow-up actions.- [COMMAND_EXECUTION]: The skill references a command
omh runtime record. This is part of the 'oh-my-hermes' project infrastructure used for workflow tracking and does not involve risky execution of untrusted input or unauthorized privilege escalation.
Audit Metadata