ohmyclaw

SUSPICIOUS. The skill’s overall purpose is coherent for a multi-provider coding harness, and the jq install path is benign. However, it normalizes immediate shell execution from slash commands, forwards API keys/OAuth context into external CLIs, and emits session metadata through unspecified hook endpoints; with helper scripts and provider tooling not fully shown, the trust and data-flow footprint is broader than ideal.