ulw-context

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the omh (Oh-My-Hermes) CLI tools, such as omh runtime record and omh memory, to manage the workflow state and project terminology storage. These operations are consistent with the skill's stated purpose and the author's ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill features a surface for indirect prompt injection as it ingests content from PROJECT_TERMS.md (specified in SKILL.md and references/project-terms.md). However, it mitigates this risk with explicit boundary markers and instructions: it defines the source as human-only prose with "zero direct machine or routing authority" and strictly forbids using the content as triggers or dispatch inputs. Capability inventory includes local memory tools, but all updates require explicit human confirmation gates.
  • [EXTERNAL_DOWNLOADS]: References the mattpocock/skills GitHub repository in references/decision-frontier.md and references/project-terms.md. This is for licensing and design pattern attribution only and does not involve automated downloads, dependencies, or remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 12:36 AM