Agent skill · Audited from source
Ralphex
skill · umputun/ralphexMIT licenceAudited 18 Oct 2026 · source 391fb7e1141c
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 391fb7e1141c and found no filesystem, network or shell access and no hard-coded secrets. What it does: Run ralphex autonomous plan execution with progress monitoring
Cite
Cite this page
ModelsAtlas. “Ralphex (umputun/ralphex)”. Retrieved 18 Oct 2026. https://modelsatlas.com/skills/umputun/ralphex
Trust audit
Audit 0.4.1 · source read 18 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 1 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (6)
MEDIUMInventory / provenanceinv.symlink · scripts/ralphex-dk/ralphex_dk.py
scripts/ralphex-dk/ralphex_dk.py
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceinv.symlink · assets/claude/ralphex-adopt.md
assets/claude/ralphex-adopt.md
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceinv.symlink · assets/claude/ralphex-plan.md
assets/claude/ralphex-plan.md
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceinv.symlink · assets/claude/ralphex-update.md
assets/claude/ralphex-update.md
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceinv.symlink · assets/claude/ralphex.md
assets/claude/ralphex.md
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceskill.no_frontmatter · SKILL.md:1
- Why
- SKILL.md lacks name/description frontmatter
- Fix
- —
Audit 0.4.1 · source sha 391fb7e1141c · 18 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherumputun GitHub userOwner of the repository this skill is read from
- Source folderumputun/ralphex/assets/claude/skills/ralphexThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict391fb7e1141cA new audit runs when the source changes
- Repository statusNot archivedLast push 4 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Run ralphex autonomous plan execution with progress monitoring
---
description: Run ralphex autonomous plan execution with progress monitoring
argument-hint: 'optional plan file path'
allowed-tools: [Bash, Read, AskUserQuestion, TaskOutput, Glob]
---
# ralphex - Autonomous Plan Execution
**SCOPE**: This command ONLY launches ralphex, monitors progress, and reports status. Do NOT take any other actions.
## Step 0: Verify CLI Installation
Check if ralphex CLI is installed:
```bash
which ralphex
```
**If not found**, guide installation based on platform:
- **macOS (Homebrew)**: `brew install umputun/apps/ralphex`
- **Linux (Debian/Ubuntu)**: download `.deb` from https://github.com/umputun/ralphex/releases
- **Linux (RHEL/Fedora)**: download `.rpm` from https://github.com/umputun/ralphex/releases
- **Any platform with Go**: `go install github.com/umputun/ralphex/cmd/ralphex@latest`
Use AskUserQuestion to confirm installation method, then guide through it. **Do not proceed until `which ralphex` succeeds.**
## Step 1: Check for Plan Argument
Check `$ARGUMENTS` for optional plan file path:
- if argument provided: validate file exists using Read tool, skip plan selection in Step 3
- if no argument: will ask for plan selection in Step 3
## Step 2: Ask Execution Mode
Use AskUserQuestion:
- header: "Mode"
- question: "Which execution mode should ralphex use?"
- options:
- label: "Full (Recommended)"
description: "Task execution + Claude review + Codex loop + final Claude review"
- label: "Review"
description: "Skip tasks, run full review pipeline (Claude + Codex + Claude)"
- label: "Codex-only"
description: "Skip tasks and first Claude review, run only Codex loop"
## Step 3: Plan Selection (if no argument provided)
**If Full mode selected:**
- Use Glob: `docs/plans/*.md` (excludes completed/)
- Plan is REQUIRED
- **IMPORTANT**: Glob returns oldest-first, so REVERSE the list to get most recent first
- Build AskUserQuestion with up to 4 most recent plans
- First option (most recent) should have "(Recommended)" suffix
- User MUST select one
**If Review or Codex-only mode selected:**
- Use Glob: `docs/plans/**/*.md` (includes completed/ for context)
- Plan is OPTIONAL
- **IMPORTANT**: Glob returns oldest-first, so REVERSE the list to get most recent first
- Build AskUserQuestion with up to 4 most recent plans PLUS "None" option at the end
- First plan option (most recent) should have "(Recommended)" suffix
- "None" option description: "Review existing changes without a plan file"
- If user selects "None", run without plan file
## Step 4: Ask Max Iterations
Use AskUserQuestion:
- header: "Iterations"
- question: "Maximum number of task iterations?"
- options:
- label: "50 (Recommended)"
description: "Default - suitable for most plans"
- label: "25"
description: "Shorter plans or quick iterations"
- label: "100"
description: "Large plans with many tasks"
## Step 5: Launch ralphex in Background
Build and run the command:
```bash
ralphex \
[--review] # if user selected "Review" mode
[--codex-only] # if user selected "Codex-only" mode
[--max-iterations N] # from user selection (25, 50, or 100)
[plan-file] # from argument OR plan selection (omit if "None" selected)
```
Run using Bash tool with `run_in_background: true`. **Save the task_id from the response** - needed for status checks later.
**Determine progress filename** based on mode and plan selection:
- Full mode + plan: `.ralphex/progress/progress-{plan-stem}.txt`
- Review mode + plan: `.ralphex/progress/progress-{plan-stem}-review.txt`
- Codex-only + plan: `.ralphex/progress/progress-{plan-stem}-codex.txt`
- Full mode + no plan: `.ralphex/progress/progress.txt`
- Review mode + no plan: `.ralphex/progress/progress-review.txt`
- Codex-only + no plan: `.ralphex/progress/progress-codex.txt`
Where `{plan-stem}` is the plan filename without extension (e.g., `fix-bugs` from `fix-bugs.md`).
## Step 6: Confirm Launch
1. Wait 10-15 seconds for initialization
2. Read last 20 lines of progress file: `tail -20 [progress-filename]`
3. Confirm ralphex started by checking for "Plan:", "Branch:", "Started:" lines
4. Report launch confirmation:
```
ralphex started. Task ID: [task_id]
Plan: [plan file from progress file]
Branch: [branch from progress file]
Mode: [mode from progress file]
Progress file: [progress-filename]
Manual monitoring:
tail -f [progress-filename] # live stream
tail -50 [progress-filename] # recent activity
ralphex runs autonomously (can take hours). Process continues if you close this conversation.
Ask "check ralphex" to get status update.
```
**STOP HERE after reporting launch status. Do not continue monitoring automatically.**
## Step 7: Progress Check (only on explicit user request)
If user explicitly asks "check ralphex", "ralphex status", or "how is ralphex doing":
1. Use TaskOutput tool with `block: false` to check process status (use task_id from Step 5)
2. Read last 40 lines of progress file (use filename from Step 5)
**If process still running:**
- Report current phase from progress file:
- "task iteration N" → Task Execution phase
- "codex iteration N" → Codex External Review phase
- "review pass 1/2" → Claude Review phase
- Show recent activity lines
**If process exited (TaskOutput shows completion):**
- Exit code 0 → success, report "ralphex completed successfully"
- Exit code non-zero → failure, report "ralphex failed"
- Read final lines of progress file for summary
**After reporting status, STOP. Do not offer to do anything else.**
## Constraints
- This command is ONLY for launching and monitoring ralphex
- Do NOT offer to help with code, commits, PRs, or anything else
- Do NOT make suggestions or recommendations beyond status reporting
- Do NOT take any actions on the codebase
- After launch confirmation: wait for user to explicitly request status check
- After status check: report and stop
## Nested Claude Code Sessions
ralphex automatically strips Claude CoExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 391fb7e
git clone https://github.com/umputun/ralphex git -C ralphex checkout 391fb7e1141c
The author documents no install command, so this uses the repository directly. Our verdict covers commit 391fb7e1141c only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
391fb7e1141c
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/umputun/ralphex/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →umputun/ralphex
Create structured implementation plan in docs/plans/
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
Add this badge to your README
[](https://modelsatlas.com/skills/umputun/ralphex/)
<a href="https://modelsatlas.com/skills/umputun/ralphex/"><img src="https://modelsatlas.com/skills/umputun/ralphex/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about Ralphex
What does the Ralphex skill do?
Is Ralphex safe to install?
What can Ralphex access on my machine?
Which assistants does Ralphex work with?
How current is this page?
Sources
- github.com/umputun/ralphex/tree/master/assets/claude/skills/ralp — the audited source at commit 391fb7e1141c and every finding aboveObserved · 18 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Ralphex skill do?
- Is Ralphex safe to install?
- What can Ralphex access on my machine?