ralph
Queue processing with fresh context per phase. Processes N tasks from the queue, spawning isolated subagents to prevent context contamination. Supports serial, parallel, batch filter, and dry run modes. Triggers on "/ralph", "/ralph N", "process queue", "run pipeline tasks".
71
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md instructs the lead to read task metadata and then, for each phase, the constructed subagent prompt explicitly includes “Read the task file at ops/queue/{FILE} for context,” where `{FILE}` comes from the queue’s `file` field (e.g., `ops/queue/archive/.../source.md`), meaning outsider-authored free text from queue-provided source/task files can be ingested into the subagent’s LLM context at runtime.
- Repository
- agenticnotetaking/arscontexta
- Commit
2acfd5c
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.