oracle
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@steipete/oraclepackage from the npm registry as part of its setup process. - [COMMAND_EXECUTION]: Provides instructions for running the
oracleCLI, including a server mode (oracle serve --host 0.0.0.0) that listens on network interfaces for remote browser automation. - [DATA_EXFILTRATION]: The tool's core function is to collect local file content and transmit it to external LLM providers (via API or browser). The skill explicitly includes security advice to exclude sensitive files like
.env, keys, and tokens to prevent accidental exposure. - [PROMPT_INJECTION]: As the tool processes repository files as context for an LLM, it is theoretically susceptible to indirect prompt injection if source files contain malicious instructions. The skill encourages 'redacting aggressively' to mitigate data risks.
Audit Metadata