cancel-ralph
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
run_commandto execute shell commands (testandrm) for file system operations. - Logic:
test -f .claude/ralph-loop.local.md && echo "EXISTS" || echo "NOT_FOUND"to check file existence. - Logic:
rm .claude/ralph-loop.local.mdto delete the state file. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a local file that may be influenced by other processes or tools, creating a surface for indirect instructions if that file's content is compromised.
- Ingestion points: Reads
.claude/ralph-loop.local.mdinSKILL.mdviaview_fileto extract theiteration:field. - Boundary markers: None identified; the iteration value is directly included in the agent's output.
- Capability inventory: Uses
run_commandwhich allows arbitrary shell execution within the environment. - Sanitization: No specific sanitization or validation of the iteration value is performed before reporting it to the user.
Audit Metadata