Plugin Settings
Pass
Audited by Gen Agent Trust Hub on Jun 1, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill documents an iterative task loop pattern (referred to as the 'Ralph Wiggum' pattern) that reads instructions from a project-local file and feeds them directly back to the agent as system prompts.
- Ingestion points: Markdown body content from
.claude/ralph-loop.local.mdand other.local.mdfiles. - Boundary markers: Absent; the entire extracted markdown body is used as the next prompt.
- Capability inventory: The skill uses shell utilities (
sed,awk,grep), interacts with terminal multiplexers viatmux send-keys, and manipulates agent session flow throughjqoutput. - Sanitization: The documentation recommends using
jq --argfor safe JSON construction, which mitigates injection into the tool output, but the pattern itself remains a surface for indirect instructions. - [EXTERNAL_DOWNLOADS]: Technical references in the skill suggest the installation of the
yqutility via package managers (e.g.,brew install yq) to handle complex configuration parsing. - [COMMAND_EXECUTION]: Utility scripts and documentation provide bash examples for parsing files. Some examples use string interpolation within shell commands which could be sensitive to malformed local file content, although the skill generally advocates for safer alternatives like
jq.
Audit Metadata