cli-plugins-skills
Fail
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions and examples for interacting with the system using the
omnirouteCLI utility, encompassing memory management, plugin handling, and skill execution. - [EXTERNAL_DOWNLOADS]: The skill documentation encourages the global installation of the
omniroutepackage from npm. Additionally, theskills installcommand explicitly supports downloading content from remote locations via the--from-url <url>flag. - [REMOTE_CODE_EXECUTION]: The skill enables a workflow where remote code can be downloaded using
skills install <url>and subsequently run using theskills execute <id>command. This facilitates the execution of arbitrary remote code on the local system. - [CREDENTIALS_UNSAFE]: Several commands, including
memory search,memory add,memory clear,memory list, andskills list, utilize an--api-key <key>flag. Recommending the input of sensitive credentials as plaintext command-line arguments is an unsafe practice, as these keys can be exposed in the shell's command history or visible to other users through process monitoring tools.
Recommendations
- AI detected serious security threats
Audit Metadata