omh-ralph-task
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various command-line tools for development workflows.
- Evidence: Usage of
git,uv,pytest,sed,od, andpython3for repository status, testing, stashing, and file inspection. - Evidence: Includes a utility script
scripts/verify-redaction-marker.shthat performs local file inspection and byte-level verification. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality.
- Ingestion points: The agent reads "task envelopes" and source code from a repository (e.g.,
SKILL.md). - Boundary markers: No explicit prompt delimiters or "ignore instructions" wrappers are used for the code/data being processed.
- Capability inventory: The agent can write to files (
git add,git commit), run tests (uv run pytest), and execute shell scripts. - Sanitization: The instructions focus on manual/automated byte-level verification (
scripts/verify-redaction-marker.sh) to prevent misinterpreting data, which provides some protection against deceptive content.
Audit Metadata