omh-ralph-task

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses various command-line tools for development workflows.
  • Evidence: Usage of git, uv, pytest, sed, od, and python3 for repository status, testing, stashing, and file inspection.
  • Evidence: Includes a utility script scripts/verify-redaction-marker.sh that performs local file inspection and byte-level verification.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality.
  • Ingestion points: The agent reads "task envelopes" and source code from a repository (e.g., SKILL.md).
  • Boundary markers: No explicit prompt delimiters or "ignore instructions" wrappers are used for the code/data being processed.
  • Capability inventory: The agent can write to files (git add, git commit), run tests (uv run pytest), and execute shell scripts.
  • Sanitization: The instructions focus on manual/automated byte-level verification (scripts/verify-redaction-marker.sh) to prevent misinterpreting data, which provides some protection against deceptive content.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 09:18 AM
Security Audit — agent-trust-hub — omh-ralph-task