omh-run-efficiency
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious instructions, prompt injections, or unauthorized behaviors were detected in the skill's logic or metadata.
- [COMMAND_EXECUTION]: The skill defines workflows that execute the vendor's
omhCLI tool (e.g.,omh runtime efficiency-report,omh runtime record). These commands are used for standard observability tasks such as status recording and report generation from local JSON metadata. - [INDIRECT_PROMPT_INJECTION]: The skill processes external metadata and receipts, presenting a theoretical attack surface for indirect injection.
- Ingestion points: Processes
run_efficiency_input/v1files,session_activity_receipt/v1data, and user-provided context metrics. - Boundary markers: The instructions explicitly mandate the use of "not-evidence boundaries" and require the agent to separate prepared guidance from observed platform/runtime evidence to maintain data integrity.
- Capability inventory: The agent can execute
omhCLI tools and write reports to the local filesystem using the--writeflag. - Sanitization: Input data is restricted to specific JSON schemas (e.g.,
run_efficiency_input/v1), which mitigates the risk of processing malformed or malicious payloads.
Audit Metadata