autoresearch-goal
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a CLI tool named
omxto manage research workflows. The commandomx autoresearch-goal createincludes a--critic-commandparameter, which allows the specification of a command to be used for research validation. This is a functional feature of the workflow and does not target sensitive system areas.- [PROMPT_INJECTION]: The skill processes untrusted research topics and rubrics, creating a surface for indirect prompt injection. - Ingestion points: Input enters the system via the
--topicand--rubricarguments in theomxcommand. - Boundary markers: The skill does not explicitly define delimiters or 'ignore' instructions for the processed data.
- Capability inventory: The skill's capabilities are limited to executing
omxsubcommands and interacting with specific Codex goal tools (get_goal,create_goal,update_goal). - Sanitization: No sanitization or validation logic for the provided topic or rubric strings is mentioned in the instructions.
Audit Metadata