omp-delegate
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
ompbinary and thegitCLI using thescripts/relay.mjsscript. For write-capable tasks, the relay script passes the--yoloflag to theompbinary, which automatically approves all tool calls (including shell commands and file system modifications), bypassing manual user review at the tool level. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a relay for external task briefs that can influence the behavior of the implementer agent.
- Ingestion points: Task instructions are ingested through
stdinor the--briefargument inscripts/relay.mjs. - Boundary markers: The relay script does not programmatically wrap the brief in delimiters or isolation markers; it relies on the user to follow formatting advice in the documentation.
- Capability inventory: The target
omptool is a high-capability agent with the ability to read and write files and execute arbitrary shell commands. - Sanitization: No sanitization or filtering is performed on the brief content before it is passed to the agent's input stream.
- [DYNAMIC_EXECUTION]: The
scripts/relay.mjshelper dynamically executes an external script (lane.mjs) from a relative path (../../delegate-setup/scripts/lane.mjs) outside the skill folder. It also uses thenode:child_processmodule to launch external binaries with arguments derived from user input, although it implements basic token validation for certain flags.
Audit Metadata