olares-shared
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
@olares/clipackage from the official npm registry if the required binary is missing from the system path. This is a standard installation procedure for the tool suite. - [CREDENTIALS_UNSAFE]: The documentation identifies where authentication tokens are stored across different operating systems (macOS Keychain, Windows DPAPI, and encrypted Linux files) and mentions a deprecated plaintext storage location (
~/.olares-cli/tokens.json). It explicitly mandates best practices for credential handling, such as using interactive prompts instead of command-line arguments for passwords and prohibiting the printing of access or refresh tokens. - [COMMAND_EXECUTION]: The skill lists several
olares-clicommands for managing profiles and authentication states. These commands are part of the intended functionality for the agent to manage the Olares platform identity and session state.
Audit Metadata