cli-serve
Warn
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill includes the
omniroute autostart enablecommand, which configures the server to start automatically across sessions. It achieves this by creating systemd user services on Linux, LaunchAgent plists on macOS, and registry startup entries on Windows. - [EXTERNAL_DOWNLOADS]: The instructions guide the agent to install the
omniroutepackage globally from the npm registry usingnpm install -g omnirouteornpx omniroute. - [COMMAND_EXECUTION]: The skill is a wrapper for a large suite of CLI commands (over 250) that perform administrative tasks, including server lifecycle management (
serve,stop,restart), system diagnostics (doctor), and database backups. - [DATA_EXFILTRATION]: The
omniroute tunnel createcommand utilizes external services like Cloudflare, Tailscale, or ngrok to expose the local server and its traffic to the public internet. Additionally, the CLI handles sensitive credentials such asOMNIROUTE_API_KEYand TLS private keys (--tls-key). - [REMOTE_CODE_EXECUTION]: The
omniroute updatecommand provides a mechanism to check for, download, and install newer versions of the CLI tool from remote sources.
Audit Metadata