ulw-context
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
omh(Oh-My-Hermes) CLI tools, such asomh runtime recordandomh memory, to manage the workflow state and project terminology storage. These operations are consistent with the skill's stated purpose and the author's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill features a surface for indirect prompt injection as it ingests content from
PROJECT_TERMS.md(specified inSKILL.mdandreferences/project-terms.md). However, it mitigates this risk with explicit boundary markers and instructions: it defines the source as human-only prose with "zero direct machine or routing authority" and strictly forbids using the content as triggers or dispatch inputs. Capability inventory includes local memory tools, but all updates require explicit human confirmation gates. - [EXTERNAL_DOWNLOADS]: References the
mattpocock/skillsGitHub repository inreferences/decision-frontier.mdandreferences/project-terms.md. This is for licensing and design pattern attribution only and does not involve automated downloads, dependencies, or remote code execution.
Audit Metadata