omh-ralph

SUSPICIOUS: the skill’s core behavior is mostly aligned with its stated purpose, but it relies on an OMH plugin installed manually from a repo without clear provenance and routes plan/evidence content into action-capable subagents. The main concern is install trust plus indirect prompt-injection from project content, not confirmed malware.