omh-skill-health
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill aggregates and reports on data from potentially untrusted internal sources to provide a health dashboard.
- Ingestion points: The workflow ingests data from the platform ledger file
skills/.curator_ledger.jsonl,lint_warningsgenerated by theskill_managetool, and the output of thehermes skills checkCLI command. - Boundary markers: Instructions mandate the use of 'not-evidence boundaries' and 'metadata-only wrapper cards' to isolate processed signals from the agent's core instructional context.
- Capability inventory: The skill utilizes
omh runtime recordfor telemetry logging andskill_viewfor reading reference files. - Sanitization: The skill enforces a 'metadata-only' output policy and strictly forbids the agent from claiming or performing automatic modifications to the environment based on the health signals detected.
Audit Metadata