omc-plan
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill implements a robust planning workflow with clear boundaries between planning and execution.
- [COMMAND_EXECUTION]: Orchestrates actions by invoking internal sub-agents (planner, analyst, architect, critic) and implementation skills (team, ralph). It also supports external CLI integration via the
omctool. - [DATA_EXPOSURE]: Manages persistent workflow state in
.omc/plans/andralplan-state.json. These files are used for cross-session continuity and do not expose sensitive credentials. - [PROMPT_INJECTION]: The skill processes untrusted input from user requests and codebase exploration. While it lacks explicit boundary markers for this data, it mitigates risk through a multi-stage review process (Planner-Architect-Critic) and requires explicit approval before proceeding to implementation.
Audit Metadata