omni-api-keys
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with a local service hosted at
https://localhost:20128, minimizing the risk of unauthorized external data transmission. - [SAFE]: Authentication is handled using the
$OMNIROUTE_TOKENenvironment variable, ensuring that sensitive management tokens are not hardcoded within the skill instructions. - [SAFE]: The functionality to create, rotate, and reveal API keys is restricted to the defined local management API and aligns with the skill's primary purpose of API key administration.
Audit Metadata