cli-routing

Warn

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the user to install a package named omniroute from the public NPM registry.
  • Evidence: npm install -g omniroute and npx omniroute in SKILL.md.
  • [REMOTE_CODE_EXECUTION]: The instructions facilitate the download and execution of code from a remote repository via the npx command or global installation.
  • Evidence: Using npx omniroute allows for the execution of remote code at runtime.
  • [COMMAND_EXECUTION]: The skill provides explicit instructions to execute the omniroute CLI tool and its various subcommands (suggest, combo list, combo switch, etc.), resulting in the execution of third-party code on the local system.
  • Evidence: Multiple examples in SKILL.md provide patterns for running the tool locally.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 22, 2026, 12:52 AM
Security Audit — agent-trust-hub — cli-routing