ralph-loop
Warn
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: MEDIUMDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file contains a dynamic context injection block using the
!syntax to execute a shell script at load time. - [COMMAND_EXECUTION]: The script execution
"${ANTIGRAVITY_PLUGIN_ROOT}/scripts/setup-ralph-loop.sh" $ARGUMENTSdirectly includes user-supplied input via the$ARGUMENTSvariable, which creates a potential for shell command injection. - [PROMPT_INJECTION]: The text includes a 'CRITICAL RULE' block that explicitly instructs the agent to ignore standard exit conditions and safety considerations, overriding the model's autonomy to terminate the loop.
Audit Metadata