omh-ralph-driver
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. The skill is an orchestration playbook using specialized tools for project management.
- [PROMPT_INJECTION]: The skill utilizes framework-specific role markers (e.g.,
[omh-role:executor]) to facilitate proper agent behavior via platform hooks. This is a functional requirement and not a safety bypass attempt. - [DATA_EXPOSURE]: File operations are restricted to project-local paths and configuration files within the
.omh/directory and standard git repository structures. No sensitive system or credential paths are accessed. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a dispatcher that aggregates plan data and tool outputs into instructions for subagents.
- Ingestion points: Reads plan definitions from
.omh/plans/, evidence fromomh_gather_evidence, and reports from subagent executions. - Boundary markers: Uses the structured markdown templates in the
references/directory to clearly separate instructions from processed data. - Capability inventory: Utilizes
delegate_taskfor spawning subagents andomh_gather_evidencefor running project-specific test suites. - Sanitization: Relies on a verification subagent to validate the correctness of outputs but lacks explicit character escaping for interpolated plan descriptions.
Audit Metadata