cli-tunnel
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the
omniroutepackage from the npm registry to function. - [COMMAND_EXECUTION]: The skill operates by executing shell commands via the
omnirouteCLI for tunnel management tasks like creating, stopping, and inspecting tunnels. - [INDIRECT_PROMPT_INJECTION]: The
tunnel logscommand allows the agent to read logs which may contain untrusted data from the internet. - Ingestion points: Output from
omniroute tunnel logsinSKILL.md. - Boundary markers: None identified to separate log content from agent instructions.
- Capability inventory: Ability to execute shell commands to modify tunnel states.
- Sanitization: No sanitization of log output is specified.
Audit Metadata