Habilidades ralph
📦
ralph
v3.0.0 Revisión del contenido r1 Crítico ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos
Ejecuta bucles de desarrollo basado primero en especificaciones
Las solicitudes de software vagas suelen generar retrabajo y desviaciones. Ralph ayuda a Claude, Codex y Claude Code a aclarar requisitos, crear especificaciones y verificar el progreso mediante bucles acotados.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "ralph" from https://skillstore.io/skills/supercent-io-ralph.md and its manifest at https://skillstore.io/api/skills/supercent-io-ralph/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "ralph". Entrevístame sobre una CLI de gestión de tareas.
Resultado esperado:
Ralph hace preguntas enfocadas sobre usuarios, almacenamiento, comandos, reglas de prioridad y criterios de éxito antes de sugerir cualquier implementación.
Usando "ralph". Corrige todas las pruebas fallidas con un límite de cinco iteraciones.
Resultado esperado:
Ralph informa cada intento, enumera los fallos restantes, registra puntuaciones de verificación y se detiene cuando las pruebas pasan o se alcanza el límite.
Usando "ralph". Comprueba si esta implementación se desvió de la semilla.
Resultado esperado:
Ralph compara el resultado con los objetivos, restricciones y ontología originales, y luego resalta las áreas que necesitan corrección.
Auditoría de seguridad
Críticov4 • 7/7/2026 Abrir el informe versionado
Most external-command findings are false positives caused by Markdown backticks, fenced examples, or literal prompt text. The confirmed risks are persistent writes to hidden agent configuration, Codex developer instruction injection, and broad Gemini hook guidance that can change agent behavior beyond one task.
3
Archivos escaneados
935
Líneas analizadas
24
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (2)
Crítico
Prompt Injection Attempt Detected
The setup script appends a new Codex developer_instructions contract with phrases like "Ouroboros specification-first workflow is active" and "continue immediately". This persists agent behavior outside the skill session.
The file directly defines the persistent instruction text and writes it into ~/.codex/config.toml. This is a clear agent-instruction persistence mechanism.
Alto
Wildcard AfterAgent Hook With Reduced Confirmation
SKILL.md instructs Gemini users to add an AfterAgent hook with matcher * that runs a bash command from ~/.gemini, then suggests sandbox plus yes mode to reduce prompts.
The hook configuration and reduced-confirmation command are shown together in the documented install flow. This creates broad automatic command execution risk if followed.
Elementos de revisión de capacidades (24)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Hidden file in home directory
# 1) developer_instructions → ~/.codex/config.toml (ooo command contract)
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file in home directory
# 2) ~/.codex/prompts/ralph.md (load via /prompts:ralph)
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file in home directory
# 3) ~/.codex/prompts/ouroboros.md (load via /prompts:ouroboros)
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file in home directory
echo " 1. Adds ooo command contract to ~/.codex/config.toml developer_instructions"
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file in home directory
echo " 2. Creates ~/.codex/prompts/ralph.md for /prompts:ralph"
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file in home directory
echo " 3. Creates ~/.codex/prompts/ouroboros.md for /prompts:ouroboros"
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
# 1) developer_instructions → ~/.codex/config.toml (ooo command contract)
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
# 2) ~/.codex/prompts/ralph.md (load via /prompts:ralph)
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
# 3) ~/.codex/prompts/ouroboros.md (load via /prompts:ouroboros)
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
echo " 1. Adds ooo command contract to ~/.codex/config.toml developer_instructions"
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
echo " 2. Creates ~/.codex/prompts/ralph.md for /prompts:ralph"
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
echo " 3. Creates ~/.codex/prompts/ouroboros.md for /prompts:ouroboros"
The line is descriptive text, but it names the hidden Codex home configuration targets that this setup script later creates or writes. Persisting agent prompts and developer instructions in ~/.codex is a real configuration risk.
Alto
Hidden file access
CODEX_DIR="$HOME/.codex"
This defines ~/.codex as the target directory and the script later writes config and prompt files under it. Hidden home-directory agent configuration can persist behavior across sessions.
Alto
Python file write/append
with open(path, "w") as out:
The Python write appends or rewrites Codex developer_instructions in ~/.codex/config.toml. Persistently changing agent instructions is a high-impact configuration risk.
Alto
Python file write/append
with open(path, "a") as out:
The Python write appends or rewrites Codex developer_instructions in ~/.codex/config.toml. Persistently changing agent instructions is a high-impact configuration risk.
Alto
Python file write/append
with open(path, 'a') as f:
The Python write appends or rewrites Codex developer_instructions in ~/.codex/config.toml. Persistently changing agent instructions is a high-impact configuration risk.
Alto
Hidden file in home directory
Required in `~/.gemini/settings.json`:
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file in home directory
"includeDirectories": ["~/.gemini/extensions/ralph"]
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file in home directory
AfterAgent hook for loop continuation (add to `~/.gemini/settings.json`):
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file in home directory
"command": "bash ~/.gemini/hooks/ralph-check.sh",
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file access
Required in `~/.gemini/settings.json`:
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file access
"includeDirectories": ["~/.gemini/extensions/ralph"]
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file access
AfterAgent hook for loop continuation (add to `~/.gemini/settings.json`):
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Alto
Hidden file access
"command": "bash ~/.gemini/hooks/ralph-check.sh",
The documentation instructs users to modify hidden Gemini configuration or run hooks from ~/.gemini. This is user-directed, but it expands persistent agent hook and shell execution surface.
Factores de riesgo
⚙️ Comandos externos (155)
scripts/setup-codex-hook.sh:79 scripts/setup-codex-hook.sh:163 scripts/setup-codex-hook.sh:164 scripts/setup-codex-hook.sh:166 scripts/setup-codex-hook.sh:170 scripts/setup-codex-hook.sh:171-182 scripts/setup-codex-hook.sh:182-186 scripts/setup-codex-hook.sh:186-195 scripts/setup-codex-hook.sh:195-198 scripts/setup-codex-hook.sh:198-206 scripts/setup-codex-hook.sh:206-212 scripts/setup-codex-hook.sh:212 scripts/setup-codex-hook.sh:213-214 scripts/setup-codex-hook.sh:214-215 scripts/setup-codex-hook.sh:215-216 scripts/setup-codex-hook.sh:216-221 scripts/setup-codex-hook.sh:221-229 scripts/setup-codex-hook.sh:229-258 scripts/setup-codex-hook.sh:258-262 scripts/setup-codex-hook.sh:262-268 scripts/setup-codex-hook.sh:268-269 scripts/setup-codex-hook.sh:269-270 scripts/setup-codex-hook.sh:270-271 scripts/setup-codex-hook.sh:271-272 scripts/setup-codex-hook.sh:272-273 scripts/setup-codex-hook.sh:273-274 scripts/setup-codex-hook.sh:274-275 scripts/setup-codex-hook.sh:275-279 scripts/setup-codex-hook.sh:279-284 scripts/setup-codex-hook.sh:284-288 scripts/setup-codex-hook.sh:288-291 scripts/setup-codex-hook.sh:291-309 scripts/setup-codex-hook.sh:309-310 scripts/setup-codex-hook.sh:310-311 scripts/setup-codex-hook.sh:311-312 scripts/setup-codex-hook.sh:312-313 scripts/setup-codex-hook.sh:313-317 scripts/setup-codex-hook.sh:317 scripts/setup-codex-hook.sh:318-319 SKILL.md:36-40 SKILL.md:40-46 SKILL.md:46-56 SKILL.md:56-67 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:86-92 SKILL.md:92-96 SKILL.md:96-98 SKILL.md:98-103 SKILL.md:103-110 SKILL.md:110-113 SKILL.md:113-120 SKILL.md:120-124 SKILL.md:124-126 SKILL.md:126-129 SKILL.md:129-146 SKILL.md:146-150 SKILL.md:150-153 SKILL.md:153-157 SKILL.md:157-159 SKILL.md:159-168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170-176 SKILL.md:176-179 SKILL.md:179-186 SKILL.md:186-206 SKILL.md:206-210 SKILL.md:210-211 SKILL.md:211-222 SKILL.md:222-226 SKILL.md:226-241 SKILL.md:241-245 SKILL.md:245-273 SKILL.md:273-279 SKILL.md:279-280 SKILL.md:280-281 SKILL.md:281 SKILL.md:287-290 SKILL.md:290-294 SKILL.md:294-299 SKILL.md:299-303 SKILL.md:303-310 SKILL.md:310-323 SKILL.md:323-329 SKILL.md:329-333 SKILL.md:333-336 SKILL.md:336-362 SKILL.md:362-369 SKILL.md:369-372 SKILL.md:372-373 SKILL.md:373-374 SKILL.md:374-375 SKILL.md:375-376 SKILL.md:376-384 SKILL.md:384-398 SKILL.md:398-400 SKILL.md:400-401 SKILL.md:401-402 SKILL.md:402-403 SKILL.md:403-405 SKILL.md:405-406 SKILL.md:406-414 SKILL.md:414-420 SKILL.md:420-431 SKILL.md:431-434 SKILL.md:434-435 SKILL.md:435-440 SKILL.md:440-442 SKILL.md:442-445 SKILL.md:445-446 SKILL.md:446-447 SKILL.md:447-448 SKILL.md:448 SKILL.md:452-457 SKILL.md:457-459 SKILL.md:459-460 SKILL.md:460-467 SKILL.md:467-469 SKILL.md:469-470 SKILL.md:470-483 SKILL.md:483-486 SKILL.md:486-488 SKILL.md:488-490 SKILL.md:490-491 SKILL.md:491-494 SKILL.md:494-496 SKILL.md:496 SKILL.md:497-505 SKILL.md:505-506 SKILL.md:506-507 SKILL.md:507-508 SKILL.md:508-516 SKILL.md:516-517 SKILL.md:517-518 SKILL.md:518-519 SKILL.md:519-520 SKILL.md:520-521 SKILL.md:521-522 SKILL.md:522-523 SKILL.md:523-524 SKILL.md:524-525 SKILL.md:525-526 SKILL.md:526-527 SKILL.md:527-528 SKILL.md:528-534 SKILL.md:534-548
🌐 Acceso a red (6)
📁 Acceso al sistema de archivos (28)
scripts/setup-codex-hook.sh:5 scripts/setup-codex-hook.sh:6 scripts/setup-codex-hook.sh:7 scripts/setup-codex-hook.sh:29 scripts/setup-codex-hook.sh:30 scripts/setup-codex-hook.sh:31 scripts/setup-codex-hook.sh:5 scripts/setup-codex-hook.sh:6 scripts/setup-codex-hook.sh:7 scripts/setup-codex-hook.sh:29 scripts/setup-codex-hook.sh:30 scripts/setup-codex-hook.sh:31 scripts/setup-codex-hook.sh:42 scripts/setup-codex-hook.sh:55 scripts/setup-codex-hook.sh:90 scripts/setup-codex-hook.sh:98 scripts/setup-codex-hook.sh:144 scripts/setup-codex-hook.sh:119 scripts/setup-codex-hook.sh:125 scripts/setup-codex-hook.sh:141 SKILL.md:459 SKILL.md:464 SKILL.md:469 SKILL.md:477 SKILL.md:459 SKILL.md:464 SKILL.md:469 SKILL.md:477
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/supercent-io-ralph/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/supercent-io-ralph?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/supercent-io-ralph?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supercent-io-ralph/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/supercent-io-ralph.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
supercent-io. (2026). ralph security audit report (audit version 4) [Author version 3.0.0]. Skillstore. https://skillstore.io/skills/supercent-io-ralph/audits/4Cita BibTeX
@techreport{supercent-io-supercent-io-ralph-2026,
author = {supercent-io},
title = {ralph security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/supercent-io-ralph/audits/4},
note = {Author version 3.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ralph security audit report (audit version 4)"
version: "3.0.0"
type: report
authors:
- name: "supercent-io"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/supercent-io-ralph/audits/4"
identifiers:
- type: other
value: "skillstore:supercent-io-ralph:audit:4"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 45
Arquitectura
100
Mantenibilidad
87
Contenido
69
Comunidad
87
Cumplimiento de la especificación
Lo que puedes crear
Aclarar una solicitud de producto
Usa una entrevista socrática para convertir una idea de funcionalidad vaga en objetivos, restricciones y criterios de aceptación explícitos.
Corregir una compilación fallida
Ejecuta un bucle Ralph acotado que intenta correcciones, verifica resultados, registra fallos y se detiene al alcanzar el éxito o el límite de iteraciones.
Controlar la desviación del proyecto
Compara el progreso de implementación con la especificación semilla original y decide cuándo se necesita una corrección.
Prueba estos prompts
Iniciar una entrevista
Usa Ralph para entrevistarme sobre esta idea antes de escribir código: [describe el producto o la funcionalidad].
Crear una especificación semilla
Crea una especificación semilla de Ralph a partir de nuestra entrevista. Incluye objetivos, restricciones, criterios de aceptación y preguntas abiertas.
Ejecutar un bucle de corrección acotado
Ejecuta Ralph en esta tarea con un máximo de cinco iteraciones: corrige las comprobaciones fallidas e informa la verificación después de cada iteración.
Evaluar y evolucionar
Evalúa la implementación actual frente a la especificación semilla, identifica desviaciones y propone el siguiente paso de evolución con una condición de parada.
Mejores prácticas
- Establece un número máximo explícito de iteraciones antes de iniciar cualquier bucle Ralph.
- Revisa los scripts de configuración generados antes de permitir cambios en los archivos de configuración del agente.
- Mantén la especificación semilla breve, comprobable y vinculada a criterios de aceptación observables.
Evitar
- No uses Ralph para omitir la revisión del usuario en acciones riesgosas de archivos, shell o red.
- No inicies bucles largos a partir de objetivos poco claros o criterios de aceptación ausentes.
- No instales hooks globales sin entender los comandos que ejecutan.
Preguntas frecuentes
¿Qué hace Ralph?
Ralph estructura el trabajo de programación mediante entrevistas, especificaciones semilla, ejecución, verificación e iteración controlada.
¿Ralph escribe código por sí solo?
Guía al agente a través de tareas de programación, pero los permisos del usuario y las políticas de herramientas siguen controlando las acciones reales sobre archivos y comandos.
¿Por qué hace preguntas primero?
La entrevista reduce la ambigüedad antes de la implementación, lo que puede evitar retrabajo y requisitos omitidos.
¿Puedo usarlo con Codex?
Sí. La habilidad incluye orientación para Codex, pero su script de configuración puede modificar la configuración local de Codex.
¿El bucle es ilimitado?
No. La habilidad documenta límites de iteración predeterminados y personalizados, y los usuarios deben mantener esos límites explícitos.
¿Qué debo revisar antes de instalar?
Revisa cualquier script que escriba en archivos ocultos de configuración del agente o registre hooks que ejecuten comandos de shell.
Detalles del desarrollador
Autor
supercent-ioLicencia
MIT
Versión del autor
v3.0.0
Revisión de Skillstore
r1
Ref.
f93e9bb0daca99badb6a7e574b97737155d57cb3
Actualidad del mantenimiento
23/7/2026
Uso
22 descargas · 146 vistas
Estructura de archivos