work-session
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from task descriptions and acceptance criteria, interpolating it into prompts for subagents that have file-writing and command-execution capabilities. Evidence Chain: 1. Ingestion points:
SKILL.mdandreferences/dispatch-preparation.md. 2. Boundary markers: Absent. 3. Capability inventory: Subagents can modify files, run git commands, and execute tests as documented inreferences/approval-policy.md. 4. Sanitization: Absent. - [COMMAND_EXECUTION]: The skill executes various git commands such as
git worktree,git merge, andgit commit, alongside project-specific CLI tools to manage the development environment and session state. - [EXTERNAL_DOWNLOADS]: The skill uses
npx @stevestomp/ohno-clithroughout its workflow, including the initialization and task management steps described inSKILL.mdandreferences/ohno-integration.md. This downloads and executes a package from the NPM registry that is associated with the author's ecosystem.
Audit Metadata