ultragoal
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local CLI utility
omxto create goals, manage workflow state, and record checkpoints in the repository's.omxdirectory. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the processing of user-provided briefs.
- Ingestion points: Input is accepted via command-line arguments (
--brief,--brief-file) or standard input as described inSKILL.md. - Boundary markers: The instructions do not define delimiters or warnings to prevent the agent from following instructions embedded within the user brief.
- Capability inventory: The skill utilizes shell commands (
omx) and state management tools (create_goal,update_goal,get_goal) to execute the plan derived from the brief. - Sanitization: There is no evidence of validation or sanitization of the input brief before it is used to generate goals.
Audit Metadata