omh-skill-scout
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
omhandhermesCLI commands to track workflow status and perform skill searches. These operations are restricted to the platform's native tools and are core to the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The search functionality ingests external data from marketplaces and repositories. To manage this risk, the instructions explicitly mandate the use of 'not-evidence boundaries' to prevent external content from being treated as authoritative instructions.
Audit Metadata